Skip to content

[Docs] IBM DB2 sample should use parameterized query #10283

Open

Description

@pergardebrink

Description

The sample in the Auth0 docs for IBM DB2 is not using a parameterized SQL Query. If anyone uses this snippet of code, they would be vulnerable to SQL Injection.

https://auth0.com/docs/authenticate/database-connections/db2-script
https://github.com/auth0/docs/blob/master/articles/connections/database/db2-script.md?plain=1

The sample should instead use a parameterized query: https://github.com/ibmdb/node-ibm_db/blob/master/APIDocumentation.md#-3-querysqlquery--bindingparameters-callback

Activity

  1. changed the title [-]IBM DB2 sample should use parameterized query[/-] [+][Docs] IBM DB2 sample should use parameterized query[/+] on Aug 4, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions