Skip to content

Instantly share code, notes, and snippets.

@rohitnss
Last active Jul 31, 2020
Embed
What would you like to do?
rules:
- id: sql.injection
message: |
SQL Injection.
metadata:
owasp: "A1: Injection"
severity: ERROR
patterns:
- pattern: | #executeQuery
$RETURN $METHOD(...,String $VAR, ...) {
...
$SQL = $X + $VAR + $Y;
...
$W.executeQuery($SQL, ...);
...
}
languages:
- java
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment