eslint-plugin-weblint-security/tests/test-files/detect_sql_injection/valid_safe_variables_template_string.js

ESLint rules for enhanced security - even for React and Node.js!

const mysql = require('mysql');

const dbConnection = mysql.createConnection({
  host: "localhost",
  user: "admin",
  password: "password",
  database: "my_db"
});

// Variable with hard coded input
const phone = '11223344';

const sql = `SELECT * FROM users where tlf = "${phone}"`;

// Connect to the database
dbConnection.connect();

// Execute query
dbConnection.query(sql, (err, result) => console.log(result));