I have some sql statements being executed where i am directly passing the user input to the SQL query, I want to know if sonarqube (Community Edition, Version 9.3 (build 51899)) will detect any issues related to sql injection?
Hey there.
Detection of Injection Flaws in Java, C#, PHP, Python, JavaScript, TypeScript starts in SonarQube’s Developer Edition.