CodeQL library for Swift
codeql/swift-all 6.5.0 (changelog, source)
Search

Module SqlInjectionExtensions

Provides classes and predicates for reasoning about database queries built from user-controlled sources (that is, SQL injection vulnerabilities).

Import path

import codeql.swift.security.SqlInjectionExtensions

Imports

DataFlow
ExternalFlow

INTERNAL use only. This is an experimental API subject to change without notice.

swift

Top-level import for the Swift language pack

Predicates

sqlLikeHeuristic

Holds if f, ix describe pd and pd is a parameter that might be executed as SQL.

Classes

SqlInjectionAdditionalFlowStep

A unit class for adding additional flow steps.

SqlInjectionBarrier

A barrier for SQL injection vulnerabilities.

SqlInjectionSink

A dataflow sink for SQL injection vulnerabilities.