Package io.codemodder.remediation.sqlinjection
package io.codemodder.remediation.sqlinjection
-
ClassDescriptionRemediates HQL injection vulnerabilities.Strategy interface for remediating SQL injection vulnerabilities using JavaParser.This class is temporarily public -- it should ideally be hidden behind a package-private implementor in
io.codemodder.remediation.sqlinjection
that abstracts away all logic about remediating Hibernate injections.Composes several transformations related to SQL injections.Contains most of the logic for detecting and fixing parameterizable SQL statements for a givenMethodCallExpr
.Wrap table name parameters in SQL queries with an alphanumeric blacklist filter.