Sobelow.SQL.Stream (Sobelow v0.14.0)

View Source

SQL Injection in Stream

This submodule of the SQL module checks for SQL injection vulnerabilities through usage of the Ecto.Adapters.SQL.stream.

Ensure that the query is parameterized and not user-controlled.

SQLi Stream checks can be ignored with the following command:

$ mix sobelow -i SQL.Stream

Summary

Functions

details()

id()

parse_sql_def(fun)

rule()

run(fun, meta_file)