We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
ast-grep/ast-grep#1779
demonstrate:
ast-grep scan -r test.yml test.kt
The text was updated successfully, but these errors were encountered:
Another example
id: some_sqli_rule language: python rule: pattern: $X.execute($$$) has: kind: argument_list has: nthChild: 1 any: - kind: identifier pattern: $VAR - has: stopBy: end kind: identifier pattern: $VAR inside: stopBy: end kind: module has: stopBy: end kind: assignment pattern: $VAR = $$$
something = "value" # If has comment it does catch the vulnerable line vuln_param = other x.execute(f"DROP TABLE IF EXISTS {vuln_param}") # Vulnreable
Sorry, something went wrong.
No branches or pull requests
ast-grep/ast-grep#1779
demonstrate:
ast-grep scan -r test.yml test.kt
The text was updated successfully, but these errors were encountered: