Repository navigation

Unified: Add SQL injection query - #22942

Open

geoffw0 wants to merge 13 commits into

github:mainfrom

geoffw0:unifiedsqlinjection

Open

Unified: Add SQL injection query#22942
geoffw0 wants to merge 13 commits into
github:mainfrom
geoffw0:unifiedsqlinjection

Commits on Oct 28, 2026
- unified: Copy Swift SQL injection query and tests unchanged
  
  geoffw0
  and
  Copilot
  committed
  5e9026d
- unified: Collect original Swift SQL injection configuration
  
  geoffw0
  and
  Copilot
  committed
  14f7a14
- unified: Port SQL injection query with annotated test baseline
  
  geoffw0
  and
  Copilot
  committed
  53152a3
- unified: Model unambiguous Swift SQL injection sinks
  
  geoffw0
  and
  Copilot
  committed
  8ce85ea
- unified: Recognize SQL sinks by resolved parameter names
  
  geoffw0
  and
  Copilot
  committed
  9f930b0
- unified: Resolve SQLite run and scalar SQL sinks precisely
  
  geoffw0
  and
  Copilot
  committed
  9a3c558
- unified: Clarify SQL injection prevention guidance
  
  geoffw0
  and
  Copilot
  committed
  92ebcc0
- unified: move the new test cases into organization of existing test cases.
  geoffw0
  committed
  42158ff
- unified: Add / edit doc and comments.
  geoffw0
  committed
  c0afa1f
- unified: Add a few more test cases around parameter names and call target confusion.
  geoffw0
  committed
  b1a43f7
- unified: Clean up heuristicSink predicate.
  geoffw0
  committed
  2bcd3ab
- unified: Undo the .qhelp change. I'm not convinced it's meaningfully better.
  geoffw0
  committed
  5921954
Commits on Oct 29, 2026
- unified: Remove database-store sinks that duplicate sql-sinks (the database storage query can just match both patterns, as the Rust version does; any potential SQL injection is input to a database).
  geoffw0
  committed
  c38ed2a

Commits

Commits on Oct 28, 2026

Commits on Oct 29, 2026