GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Add support for Django ORM `.raw` method to SQL parameterization codemod · Issue #442 · pixee/codemodder-python

Add support for Django ORM .raw method to SQL parameterization codemod #442

New issue
Copy link
New issue
Copy link
Open
Open
Add support for Django ORM .raw method to SQL parameterization codemod#442
Copy link
Labels
enhancementNew feature or requestNew feature or request

Description

@drdavella
drdavella
opened on Apr 4, 2024
Issue body actions

Various ORMs (e.g. SQLAlchemy, Django) enable pass-thru execution of raw SQL queries. We need to consider these methods when finding and fixing potential SQL injection vulnerabilities. In the Django ORM specifically, this is enabled via the .raw method: https://docs.djangoproject.com/en/5.0/topics/db/sql/#performing-raw-sql-queries

Activity

  1. drdavella
    added
    enhancementNew feature or requestNew feature or request
    on Apr 4, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or requestNew feature or request

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions

      You are visitor 01402503 — GeezerVison does not store the pages you look up.
      Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.