@hoanghainh/komagu 2.5.0 → 2.6.0

package/assess/lsa/examples/eval-run-6/gptoss-a/batches/injection-002.json

@@ -0,0 +1,205 @@
+{
+  "batch_id": "injection-002",
+  "files": [
+    "dotnet-legacy/Web/Controllers/InvoiceController.cs",
+    "java-legacy/src/com/acme/mapper/OrderMapper.xml",
+    "java-legacy/src/com/acme/web/OrderServlet.java",
+    "php-codeigniter/application/controllers/Invoice.php",
+    "php-plain/order_detail.php",
+    "php-plain/search.php",
+    "python-flask/app.py",
+    "sql-procs/sp_search_orders.sql"
+  ],
+  "knowledge_files": [
+    "knowledge/stacks/php.md",
+    "knowledge/stacks/node-python-ruby.md",
+    "knowledge/stacks/dotnet.md",
+    "knowledge/stacks/java.md"
+  ],
+  "candidates": [
+    {
+      "candidate_id": "I-0031",
+      "rule": "sql-concat",
+      "category_hint": "sql",
+      "subtype_hint": "string_concatenation",
+      "language": "php",
+      "file": "php-plain/order_detail.php",
+      "line": 6,
+      "snippet": "$res = mysql_query(\"SELECT * FROM orders WHERE id = \" . $id);",
+      "sql_var": "$res",
+      "input_hint": "request_input_nearby",
+      "sanitizer_hints": [],
+      "priority": "high"
+    },
+    {
+      "candidate_id": "I-0032",
+      "rule": "sql-append",
+      "category_hint": "sql",
+      "subtype_hint": "string_concatenation",
+      "language": "php",
+      "file": "php-plain/search.php",
+      "line": 8,
+      "snippet": "$sql .= \" AND name LIKE '%\" . $kw . \"%'\";",
+      "sql_var": "$sql",
+      "input_hint": "request_input_nearby",
+      "sanitizer_hints": [
+        "addslashes"
+      ],
+      "priority": "high"
+    },
+    {
+      "candidate_id": "I-0033",
+      "rule": "sql-concat",
+      "category_hint": "sql",
+      "subtype_hint": "string_concatenation|dynamic_identifier",
+      "language": "php",
+      "file": "php-plain/search.php",
+      "line": 9,
+      "snippet": "$sql .= \" ORDER BY \" . $sort;",
+      "sql_var": "$sql",
+      "input_hint": "request_input_nearby",
+      "sanitizer_hints": [],
+      "priority": "high"
+    },
+    {
+      "candidate_id": "I-0034",
+      "rule": "heredoc-interpolation",
+      "category_hint": "sql",
+      "subtype_hint": "string_interpolation",
+      "language": "php",
+      "file": "php-plain/search.php",
+      "line": 14,
+      "snippet": "WHERE category = '{$_GET['cat']}'",
+      "sql_var": null,
+      "input_hint": "request_input_on_line",
+      "sanitizer_hints": [],
+      "priority": "high"
+    },
+    {
+      "candidate_id": "I-0036",
+      "rule": "sql-interpolation",
+      "category_hint": "sql",
+      "subtype_hint": "string_interpolation",
+      "language": "python",
+      "file": "python-flask/app.py",
+      "line": 29,
+      "snippet": "cur.execute(f\"SELECT * FROM products WHERE name LIKE '%{q}%'\")",
+      "sql_var": null,
+      "input_hint": "request_input_nearby",
+      "sanitizer_hints": [],
+      "priority": "high"
+    },
+    {
+      "candidate_id": "I-0035",
+      "rule": "sql-format",
+      "category_hint": "sql",
+      "subtype_hint": "format_string",
+      "language": "python",
+      "file": "python-flask/app.py",
+      "line": 12,
+      "snippet": "cur.execute(\"SELECT * FROM orders WHERE id = %s\" % order_id)",
+      "sql_var": null,
+      "input_hint": "request_input_in_file",
+      "sanitizer_hints": [],
+      "priority": "normal"
+    },
+    {
+      "candidate_id": "I-0008",
+      "rule": "sql-concat",
+      "category_hint": "sql",
+      "subtype_hint": "string_concatenation",
+      "language": "cs",
+      "file": "dotnet-legacy/Web/Controllers/InvoiceController.cs",
+      "line": 28,
+      "snippet": "var list = db.Database.SqlQuery<Invoice>(\"SELECT * FROM Invoices WHERE Customer = '\" + customer + \"'\").ToList();",
+      "sql_var": "list",
+      "input_hint": "none",
+      "sanitizer_hints": [],
+      "priority": "normal"
+    },
+    {
+      "candidate_id": "I-0015",
+      "rule": "mybatis-dollar",
+      "category_hint": "sql",
+      "subtype_hint": "template_placeholder",
+      "language": "xml",
+      "file": "java-legacy/src/com/acme/mapper/OrderMapper.xml",
+      "line": 9,
+      "snippet": "ORDER BY ${orderBy}",
+      "sql_var": null,
+      "input_hint": "none",
+      "sanitizer_hints": [],
+      "priority": "normal"
+    },
+    {
+      "candidate_id": "I-0018",
+      "rule": "sql-concat",
+      "category_hint": "sql",
+      "subtype_hint": "string_concatenation",
+      "language": "java",
+      "file": "java-legacy/src/com/acme/web/OrderServlet.java",
+      "line": 15,
+      "snippet": "ResultSet rs = stmt.executeQuery(\"SELECT * FROM orders WHERE id = '\" + id + \"'\");",
+      "sql_var": "rs",
+      "input_hint": "request_input_in_file",
+      "sanitizer_hints": [],
+      "priority": "normal"
+    },
+    {
+      "candidate_id": "I-0019",
+      "rule": "sql-append",
+      "category_hint": "sql",
+      "subtype_hint": "string_concatenation",
+      "language": "java",
+      "file": "java-legacy/src/com/acme/web/OrderServlet.java",
+      "line": 17,
+      "snippet": "sb.append(\" AND order_id = \").append(id);",
+      "sql_var": "sb",
+      "input_hint": "request_input_in_file",
+      "sanitizer_hints": [],
+      "priority": "normal"
+    },
+    {
+      "candidate_id": "I-0026",
+      "rule": "sql-interpolation",
+      "category_hint": "sql",
+      "subtype_hint": "string_interpolation",
+      "language": "php",
+      "file": "php-codeigniter/application/controllers/Invoice.php",
+      "line": 10,
+      "snippet": "$q = $this->db->query(\"SELECT * FROM invoices WHERE id = $id\");",
+      "sql_var": "$q",
+      "input_hint": "request_input_in_file",
+      "sanitizer_hints": [],
+      "priority": "normal"
+    },
+    {
+      "candidate_id": "I-0037",
+      "rule": "proc-dynamic-sql",
+      "category_hint": "sql",
+      "subtype_hint": "stored_procedure_dynamic_sql",
+      "language": "sql",
+      "file": "sql-procs/sp_search_orders.sql",
+      "line": 5,
+      "snippet": "SET @sql = 'SELECT * FROM Orders WHERE Customer = ''' + @Customer + ''' ORDER BY ' + @Sort",
+      "sql_var": null,
+      "input_hint": "none",
+      "sanitizer_hints": [],
+      "priority": "normal"
+    },
+    {
+      "candidate_id": "I-0038",
+      "rule": "proc-dynamic-sql",
+      "category_hint": "sql",
+      "subtype_hint": "stored_procedure_dynamic_sql",
+      "language": "sql",
+      "file": "sql-procs/sp_search_orders.sql",
+      "line": 6,
+      "snippet": "EXEC(@sql)",
+      "sql_var": null,
+      "input_hint": "none",
+      "sanitizer_hints": [],
+      "priority": "normal"
+    }
+  ]
+}