Method scanStatement

pkg/sql/security/scanner.go:649–662

scanStatement analyzes a single statement for injection patterns.

(stmt ast.Statement, result *ScanResult)

// scanStatement analyzes a single statement for injection patterns.
func (s *Scanner) scanStatement(stmt ast.Statement, result *ScanResult) {
	switch st := stmt.(type) {
	case *ast.SelectStatement:
		s.scanSelectStatement(st, result)
	case *ast.InsertStatement:
		s.scanInsertStatement(st, result)
	case *ast.UpdateStatement:
		s.scanUpdateStatement(st, result)
	case *ast.DeleteStatement:
		s.scanDeleteStatement(st, result)
	case *ast.SetOperation:
		s.scanSetOperation(st, result)
	}
}

// scanSelectStatement analyzes SELECT for injection patterns.
func (s *Scanner) scanSelectStatement(stmt *ast.SelectStatement, result *ScanResult) {