title: SQL query construction using format string shortname: sql-query-construction-using-format-string description: The software does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command. anchor: gosec group: top10-injection pretty_name: G201: SQL query construction using format string
SQL query construction using format string¶
The software does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command.