Skip to content

Commit ba99e21

Browse files
committed
Python: Remove modeling of sqlescapy PyPI package
I've never seen this being used in real code, and this library doesn't have a lot of traction, so I would rather not commit to supporting it (which includes verifying that it actually makes things safe). Personally I don't think this is the right approach for avoiding SQL injection either.
1 parent 91442e1 commit ba99e21

File tree

1 file changed

+0
-13
lines changed

1 file changed

+0
-13
lines changed

python/ql/src/experimental/semmle/python/frameworks/SqlAlchemy.qll

Lines changed: 0 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -312,19 +312,6 @@ private module SqlAlchemy {
312312
)
313313
}
314314
}
315-
316-
/**
317-
* Gets a reference to `sqlescapy.sqlescape`.
318-
*
319-
* See https://pypi.org/project/sqlescapy/
320-
*/
321-
class SQLEscapySanitizerCall extends DataFlow::CallCfgNode, SQLEscape::Range {
322-
SQLEscapySanitizerCall() {
323-
this = API::moduleImport("sqlescapy").getMember("sqlescape").getACall()
324-
}
325-
326-
override DataFlow::Node getAnInput() { result = this.getArg(0) }
327-
}
328315
}
329316

330317
private module OldModeling {

0 commit comments

Comments
 (0)