Skip to content

Conversation

adniyaYousaf
Copy link

No description provided.

console.log(req.params.name);
try {
const name = req.params.name;
const result = await db.query(`SELECT product_name FROM products WHERE product_name ILIKE '%${name}%';`);

Check failure

Code scanning / SonarCloud

Database queries should not be vulnerable to injection attacks

<!--SONAR_ISSUE_KEY:AY-X_icjYaYa25wtkk93-->Change this code to not construct SQL queries directly from user-controlled data. <p>See more on <a href="https://sonarcloud.io/project/issues?id=CodeYourFuture_Module-Databases&issues=AY-X_icjYaYa25wtkk93&open=AY-X_icjYaYa25wtkk93&pullRequest=164">SonarCloud</a></p>
Copy link

Quality Gate Passed Quality Gate passed

Issues
10 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant