search

stripe-archive / safesql

Static analysis tool for Golang that protects against SQL injections
MIT License
564 stars 47 forks source link

Add support for sqlx #8

Open richo opened 8 years ago

richo commented 8 years ago

r? @zenazn

Feel free to be brutal in code review, I have no idea what I'm doing.

This doesn't FP anything in sqlx, and does detect a bunch of sqli in the original project I was looking at (As well as some FPs)

zenazn commented 8 years ago

...we really need automated tests :/

richo commented 8 years ago

Yes.

I can write a few, although I know ~nothing about idiomatic testing in go