Sobelow v0.6.0 Sobelow.SQL

SQL Injection

SQL injection occurs when untrusted input is interpolated directly into a SQL query. In a typical Phoenix application, this would mean using the Ecto.Adapters.SQL.query method and not using the parameterization feature.

Read more about SQL injection here: https://www.owasp.org/index.php/SQL_Injection

SQL injection checks can be ignored with the following command:

$ mix sobelow -i SQL

Summary

Functions

details()
get_vulns(fun, filename, web_root, skip_mods \\ [])