Skip to content
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion java/src/security/CWE-089/MyBatisMapperXmlSqlInjection.ql
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
* @name SQL injection in MyBatis Mapper XML
* @description Constructing a dynamic SQL statement with input that comes from an
* untrusted source could allow an attacker to modify the statement's
* meaning or to execute arbitrary SQL commands.
* meaning or to execute arbitrary SQL commands. (test: targeted CI validation)
* @kind path-problem
* @problem.severity error
* @precision high
Expand Down