Odoo/odoo/addons/test_lint/tests/_odoo_checker_sql_injection.py, branch 14.0 The current checkout of upstream Odoo [FIX] test_lint, *: false negative in sql injection linter 2020-07-10T07:12:35+00:00 Xavier Morel xmo@odoo.com 2020-06-23T10:27:20+00:00 e162e6f714e725553cf41e21e160c09f5d107d81 The linter would miss / fail to warn on injection of *local variables* in some cases. Try to improve it to be stricter and more reliable, after discussion with odo, sql which is "correctly" dynamic should use psycopg2's sql package in order to bypass the linter (bonus: it should also properly escape & quote identifiers). closes odoo/odoo#53938 Related: odoo/enterprise#11718 Signed-off-by: Xavier Morel (xmo) <xmo@odoo.com> 
The linter would miss / fail to warn on injection of *local variables*
in some cases.

Try to improve it to be stricter and more reliable, after discussion
with odo, sql which is "correctly" dynamic should use psycopg2's sql
package in order to bypass the linter (bonus: it should also properly
escape & quote identifiers).

closes odoo/odoo#53938

Related: odoo/enterprise#11718
Signed-off-by: Xavier Morel (xmo) <xmo@odoo.com>
[ADD] test_lint: Add sql-injection pylint check 2019-10-02T14:16:38+00:00 Moisés López moylop260@vauxoo.com 2019-08-20T16:58:35+00:00 a5251e1d40d9bd833993bf1618fc2760adb6567a closes odoo/odoo#36583 Signed-off-by: Xavier Morel (xmo) <xmo@odoo.com> 
closes odoo/odoo#36583

Signed-off-by: Xavier Morel (xmo) <xmo@odoo.com>