зеркало из https://github.com/github/codeql-go.git
Merge pull request #683 from lyoung-confluent/patch-2
Match gopkg.in import of squirrel for SQLi query
This commit is contained in:
Коммит
034f3d5e76
|
@ -83,7 +83,11 @@ module SQL {
|
|||
SquirrelQueryString() {
|
||||
exists(Function fn |
|
||||
exists(string sq |
|
||||
sq = package(["github.com/Masterminds", "github.com/lann"], "squirrel")
|
||||
sq =
|
||||
package([
|
||||
"github.com/Masterminds/squirrel", "gopkg.in/Masterminds/squirrel",
|
||||
"github.com/lann/squirrel"
|
||||
], "")
|
||||
|
|
||||
// first argument to `squirrel.Expr`
|
||||
fn.hasQualifiedName(sq, "Expr")
|
||||
|
|
Загрузка…
Ссылка в новой задаче