pythonsecurity-s5147-nosql-injection-mining
Read-only mining codemod for pythonsecurity:S5147: NoSQL operations should not be vulnerable to injection attacks.
Emits python_security_finding metric rows with blocking severity. Source files are never modified.
Rule
- ID:
pythonsecurity:S5147 - Severity: blocking
- Remediation: Use parameterized NoSQL queries instead of string-built filters
Usage
bash
Development
bash