Merge pull request #2985 from returntocorp/emma/introduce-deepok

chore: use deepok to mark lines as ok when run with the pro engine
semgrep · Jun 28, 2023 · b2b56f5 · b2b56f5
2 parents 9c3c28e + 72991de
commit b2b56f5
Showing 1 changed file with 2 additions and 4 deletions.
diff --git a/java/spring/security/injection/tainted-sql-string.java b/java/spring/security/injection/tainted-sql-string.java
@@ -177,8 +177,7 @@ class Test {
   public ResultSet ok7(@RequestBody String name, Foo foo) {
         var v = foo.getBars(name).get(0).getX();
         String sql = "SELECT * FROM table WHERE name = ";
-        // ok in pro engine
-        // ruleid: tainted-sql-string
+        // ruleid: deepok: tainted-sql-string
         sql += v + ";";
         Connection conn = DriverManager.getConnection("jdbc:mysql://localhost:8080", "guest", "password");
         Statement stmt = conn.createStatement();
@@ -213,8 +212,7 @@ class Test2 {
   public ResultSet ok8(@RequestBody String name, SiteModel sitemodel) {
         var v = sitemodel.getPrefixes(name).sites.ids.get(0);
         String sql = "SELECT * FROM table WHERE name = ";
-        // ok in pro-engine
-        // ruleid: tainted-sql-string
+        // ruleid: deepok: tainted-sql-string
         sql += v + ";";
         Connection conn = DriverManager.getConnection("jdbc:mysql://localhost:8080", "guest", "password");
         Statement stmt = conn.createStatement();