CodeQL library for Java/Kotlin
codeql/java-all 0.9.2-dev (changelog, source)
Search

Module SqlConcatenatedQuery

Provides classes and modules to reason about SqlInjection vulnerabilities from string concatentation.

Import path

import semmle.code.java.security.SqlConcatenatedQuery

Imports

java

Provides all default Java QL imports.

Modules

UncontrolledStringBuilderSourceFlowConfig

A taint-tracking configuration for reasoning about uncontrolled string builders.

Aliases

UncontrolledStringBuilderSourceFlow

Taint-tracking flow for uncontrolled string builders that are used in a SQL query.