pi-lens
Version:
Real-time code feedback for pi — LSP, linters, formatters, type-checking, structural analysis & booboo
15 lines (14 loc) • 519 B
YAML
id: no-sql-in-code
valid:
- "db.find({ id })"
- "db.findOne({ where: { id } })"
- 'sql.unsafe("non-sql")'
- 'db.query("SELECT * FROM users")'
- 'db.query("INSERT INTO x VALUES (1)")'
- 'db.query("UPDATE users SET x = 1")'
- 'db.query("SELECT * FROM users WHERE id = ?", [id])'
- 'db.query("SELECT * FROM " + "users")'
invalid:
- 'db.query("SELECT * FROM users WHERE id = " + id)'
- 'db.query("DELETE FROM sessions WHERE token = " + token, [])'
- 'db.query(`SELECT * FROM users WHERE id = ${id}`)'