Skip to content
This repository was archived by the owner on Jan 5, 2023. It is now read-only.

Commit d807e8d

Browse files
committed
Add more methods from GORM as sinks
Cf. https://gorm.io/docs/security.html
1 parent 95c1f75 commit d807e8d

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

ql/src/semmle/go/frameworks/SQL.qll

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -168,7 +168,8 @@ module SQL {
168168
meth.hasQualifiedName(package, "DB", name) and
169169
this = meth.getACall().getArgument(0) and
170170
package in ["github.com/jinzhu/gorm", "github.com/go-gorm/gorm", "gorm.io/gorm"] and
171-
name in ["Where", "Raw", "Order", "Not", "Or", "Select", "Table", "Group", "Having", "Joins"]
171+
name in ["Where", "Raw", "Order", "Not", "Or", "Select", "Table", "Group", "Having",
172+
"Joins", "Exec", "Distinct", "Pluck"]
172173
)
173174
}
174175
}

0 commit comments

Comments
 (0)