mirror of
https://github.com/Darkrock-Studios/hammer-editor.git
synced 2026-08-16 04:53:14 +00:00
The SQL-injection suppression sat one line too high: the justification comment was directly above the flagged prepareStatement call, pushing the nosemgrep directive out of Semgrep's range (the flagged line or the one immediately above it). Reorder so the directive sits directly above the statement. The finding is a false positive: sql is always a compile-time INSERT literal from the copy* methods with values bound via placeholders. |
||
|---|---|---|
| .. | ||
| src | ||
| build.gradle.kts | ||