Package io.codemodder.remediation.sqlinjection
package io.codemodder.remediation.sqlinjection
-
ClassDescriptionRemediates HQL injection vulnerabilities.This class is temporarily public -- it should ideally be hidden behind a package-private implementor in
io.codemodder.remediation.sqlinjection
that abstracts away all logic about remediating Hibernate injections.Composes several transformations related to SQL injections.A Remediator for SQL injection issues.Contains most of the logic for detecting and fixing parameterizable SQL statements for a givenMethodCallExpr
.Wrap table name parameters in SQL queries with an alphanumeric blacklist filter.