mcp-server-semgrep/semgrep-rules/javascript/lang/security/audit/sqli/node-mysql-sqli.js

MCP Server for Semgrep Integration - static code analysis with AI

var AWS = require('aws-sdk');
const mysql = require('mysql2');


async function test2(req,res,next) {

    var createStmt = 'create temporary table ' + req.body.foo + '_jointemp (temp_seq int, '+ a + ' varchar(100)); ';
  // ok: node-mysql-sqli
  // diff rule
  await conn.query(createStmt);

}
async function test1(input) {
  var secretsManager = new AWS.SecretsManager();
  var secretId = input.arguments[0][2];
  const secret = await secretsManager.getSecretValue({
      SecretId: secretId
      }).promise();

  var secretJson = JSON.parse(secret.SecretString);

  var host = secretJson.host;
  var user = secretJson.username;
  var password = secretJson.password;

  let connectionConfig = {
    host: host,
    user: user,
    password: password,
    connectTimeout: 60000
  };

  var pool = await mysql.createPool(connectionConfig);
  var conn = pool.promise();

  var table = input.arguments[0][0];
  var columnName = input.arguments[0][1];

  var createStmt = 'create temporary table ' + table + '_jointemp (temp_seq int, '+ columnName + ' varchar(100)); ';
  // ruleid: node-mysql-sqli
  await conn.query(createStmt);


  var values = input.arguments.map((x, i) => "("+i+",'"+x[3]+"')");
  var insertStmt = 'insert into ' + table + '_jointemp(temp_seq, '+ columnName +') values ' + values.join(',') + ';';
  // ruleid: node-mysql-sqli
  await conn.query({sql: insertStmt, rowsAsArray: true});

  var selectStmt = 'select t2.* FROM ' + table + '_jointemp t1 LEFT OUTER JOIN ' + table + ' t2 using ('+ columnName +') order by temp_seq;'
  // ruleid: node-mysql-sqli
  const [results, fields] = await conn.execute(selectStmt);

  // ok: node-mysql-sqli
  const [results2, fields2] = await conn.execute('SELECT * FROM foobar WHERE id = ?', [columnName]);

  var res = {};
  if(results.length > 0){
    res = results.map((row) => JSON.stringify(row));
    }
    var response = JSON.stringify({"results": res});
    conn.end();
  return response;
};