summaryrefslogtreecommitdiff
path: root/odoo/addons/test_lint/tests/_odoo_checker_sql_injection.py
AgeCommit message (Collapse)Author
2020-07-10[FIX] test_lint, *: false negative in sql injection linterXavier Morel
The linter would miss / fail to warn on injection of *local variables* in some cases. Try to improve it to be stricter and more reliable, after discussion with odo, sql which is "correctly" dynamic should use psycopg2's sql package in order to bypass the linter (bonus: it should also properly escape & quote identifiers). closes odoo/odoo#53938 Related: odoo/enterprise#11718 Signed-off-by: Xavier Morel (xmo) <xmo@odoo.com>
2019-10-02[ADD] test_lint: Add sql-injection pylint checkMoisés López
closes odoo/odoo#36583 Signed-off-by: Xavier Morel (xmo) <xmo@odoo.com>