Method scanInsertStatement

pkg/sql/security/scanner.go:683–690

scanInsertStatement analyzes INSERT for injection patterns.

(stmt *ast.InsertStatement, result *ScanResult)

// scanInsertStatement analyzes INSERT for injection patterns.
func (s *Scanner) scanInsertStatement(stmt *ast.InsertStatement, result *ScanResult) {
	// Check values for suspicious patterns (multi-row support)
	for _, row := range stmt.Values {
		for _, val := range row {
			s.scanExpressionForDangerousFunctions(val, result)
		}
	}
}

// scanUpdateStatement analyzes UPDATE for injection patterns.
func (s *Scanner) scanUpdateStatement(stmt *ast.UpdateStatement, result *ScanResult) {