Puma Scan is a software security Visual Studio extension that provides real time, continuous source code analysis as development teams write code. Vulnerabilities are immediately displayed in the development environment as spell check and compiler warnings, preventing security bugs from entering your applications.
Add additional SQL injection rules for .sql files (additional files):
Look for sp_executesql without the 2, 3 parameters or EXEC statement.
Find all where one of these methods is called using a string data w/ no parms. Plus, go a step back and make sure a string variable is appended into the statement.
Add additional SQL injection rules for .sql files (additional files):
Look for sp_executesql without the 2, 3 parameters or EXEC statement.
Find all where one of these methods is called using a string data w/ no parms. Plus, go a step back and make sure a string variable is appended into the statement.
https://msdn.microsoft.com/en-us/library/bb399403(v=vs.110).aspx