sql-injection: src/devos/db.py:704

Home / sql-injection: src/devos/db.py:704

← Prev Next →

sql-injection: src/devos/db.py:704

scanned high scan sweep 2026-04-01 16:52

Next step: Evaluate this item to determine if it's worth fixing.

Location

src/devos/db.py:704 python

Pattern: SQL query with f-string interpolation

Code Context

    def count_all(self, table: str) -> int:
        with self._lock:
            conn = self._get_conn()
            try:
return conn.execute(f"SELECT COUNT(*) as cnt FROM {table}").fetchone()["cnt"]
            finally:
                conn.close()

Evaluation

Click "Evaluate with Claude Code" to have an agent analyze this item.

Actions

Evaluate first to enable approval, or reject directly.