Skip to content

Conversation

jeremydubreil
Copy link
Contributor

No description provided.

Copy link

(Audit Mode) sca found potential 1 new issues
  • string-concat-in-sql-command-csharp (sample-repo/Program.cs: sample-repo/proj.csproj)
    More detailsDetected string concatenation in SQL command, which is a bad practice and may allow SQL injection attacks. Instead, consider using parameterized queries.
    [HttpPost]
    static void httpPostSourceToSqlSink(string inputParameter)
    {
        string query = "SELECT * FROM " + inputParameter;
        using var _ = new SqlCommand(query);
    }
}

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant