Merge pull request #14195 from Kwstubbs/SQL_int_sanitizer

Add Integer/Boolean Sanitizer to SQL injection Query

Author: smowton

go/ql/lib/change-notes/2023-09-12-add-int&bool-sanitizer-for-sql.md

@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* Added Numeric and Boolean types to SQL injection sanitzers.

go/ql/lib/semmle/go/security/SqlInjectionCustomizations.qll

@@ -40,4 +40,13 @@ module SqlInjection {
 
   /** A NoSql query, considered as a taint sink for SQL injection. */
   class NoSqlQueryAsSink extends Sink instanceof NoSql::Query { }
+
+  /**
+   * A numeric- or boolean-typed node, considered a sanitizer for sql injection.
+   */
+  class NumericOrBooleanSanitizer extends Sanitizer {
+    NumericOrBooleanSanitizer() {
+      this.getType() instanceof NumericType or this.getType() instanceof BoolType
+    }
+  }
 }