

@test.checks('Str')
@test.test_id('B608')
def hardcoded_sql_expressions(context):
    val = _evaluate_ast(val.node)
    if _check_string(val[1]):
        return bandit.Issue(severity=bandit.MEDIUM, confidence=(bandit.MEDIUM if val[0] else bandit.LOW), text='Possible SQL injection vector through string-based query construction.')

dataset/ETHPy150Open openstack/bandit/bandit/plugins/injection_sql.py hardcoded_sql_expressions/VarMisuse@30/44 `context`->`val`