Find SQL injection

Proprietary

Finds SQL command text built by string concatenation, interpolation, string.Format or string.Concat with non-constant values and passed to IDbCommand.CommandText, a command constructor, EF Core FromSqlRaw/ExecuteSqlRaw/SqlQueryRaw or Dapper. Values are followed through local variables of the enclosing member.

OpenRewrite.Recipes.CSharp.Security.FindSqlInjection

mod run . --recipe=OpenRewrite.Recipes.CSharp.Security.FindSqlInjection

Install it once, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.