Add some warnings for misusing SQL injection protection (#4)

This commit is contained in:
Bryan Terce
2018-05-09 15:35:47 -07:00
parent cef0c4c816
commit 39bb3b0b72
2 changed files with 54 additions and 9 deletions

View File

@@ -25,11 +25,16 @@ public class ExprUnsafe extends SimpleExpression<String> {
"unsafe %string%");
}
private Expression<String> str;
private Expression<String> stringExpression;
private String rawExpression;
public String getRawExpression() {
return rawExpression;
}
@Override
protected String[] get(Event e) {
return str.getArray(e);
return stringExpression.getArray(e);
}
@Override
@@ -44,14 +49,15 @@ public class ExprUnsafe extends SimpleExpression<String> {
@Override
public String toString(Event e, boolean debug) {
return "unsafe " + str.toString(e, debug);
return "unsafe " + stringExpression.toString(e, debug);
}
@SuppressWarnings("unchecked")
@Override
public boolean init(Expression<?>[] exprs, int matchedPattern, Kleenean isDelayed,
SkriptParser.ParseResult parseResult) {
str = (Expression<String>) exprs[0];
stringExpression = (Expression<String>) exprs[0];
rawExpression = parseResult.expr.substring("unsafe".length()).trim();
return true;
}
}