sql-2.yml

rules:
- id: sql.injection
  message: |
    SQL Injection.
  metadata:
    owasp: "A1: Injection"
  severity: ERROR
  patterns:
  - pattern: | #executeQuery
      $RETURN $METHOD(...,String $VAR, ...) {
        ...
        $SQL = $X + $VAR + $Y;
        ...
        $W.executeQuery($SQL, ...);
        ...
      }
  languages:
  - java