Package io.codemodder.remediation.sqlinjection
package io.codemodder.remediation.sqlinjection
-
ClassDescriptionRemediates HQL injection vulnerabilities.Strategy interface for remediating SQL injection vulnerabilities using JavaParser.This class is temporarily public -- it should ideally be hidden behind a package-private implementor in
io.codemodder.remediation.sqlinjectionthat abstracts away all logic about remediating Hibernate injections.Contains most of the logic for detecting and fixing parameterizable SQL statements for a givenMethodCallExpr.Wrap table name parameters in SQL queries with an alphanumeric blacklist filter.