Method scanExpression

pkg/sql/security/scanner.go:732–747

scanExpression analyzes an expression for injection patterns.

(expr ast.Expression, result *ScanResult, context string)

// scanExpression analyzes an expression for injection patterns.
func (s *Scanner) scanExpression(expr ast.Expression, result *ScanResult, context string) {
	if expr == nil {
		return
	}

	switch e := expr.(type) {
	case *ast.BinaryExpression:
		s.scanBinaryExpression(e, result, context)
	case *ast.FunctionCall:
		s.scanFunctionCall(e, result)
	case *ast.UnaryExpression:
		if e.Expr != nil {
			s.scanExpression(e.Expr, result, context)
		}
	}
}

// scanBinaryExpression checks for tautologies and suspicious patterns.
func (s *Scanner) scanBinaryExpression(expr *ast.BinaryExpression, result *ScanResult, context string) {