Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
Recognize interpolation in SQL strings in embedded SQL #332
Description of the Change
language-sql has match patterns for single-line strings that prevent interpolation injections from matching. To get around this, override those match patterns with our own that recognize interpolations.
Make injections work in matches. This would get really hairy, really quickly.
Interpolation in single-line strings.
I don't really see any.