{"action":"created","issue":{"url":"https://api.github.com/repos/01org/ciao/issues/81","repository_url":"https://api.github.com/repos/01org/ciao","labels_url":"https://api.github.com/repos/01org/ciao/issues/81/labels{/name}","comments_url":"https://api.github.com/repos/01org/ciao/issues/81/comments","events_url":"https://api.github.com/repos/01org/ciao/issues/81/events","html_url":"https://github.com/01org/ciao/issues/81","id":152599402,"number":81,"title":"Should use parameterized SQL queries over fmt.Sprintf ","user":{"login":"gcmurphy","id":222833,"avatar_url":"https://avatars.githubusercontent.com/u/222833?v=3","gravatar_id":"","url":"https://api.github.com/users/gcmurphy","html_url":"https://github.com/gcmurphy","followers_url":"https://api.github.com/users/gcmurphy/followers","following_url":"https://api.github.com/users/gcmurphy/following{/other_user}","gists_url":"https://api.github.com/users/gcmurphy/gists{/gist_id}","starred_url":"https://api.github.com/users/gcmurphy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gcmurphy/subscriptions","organizations_url":"https://api.github.com/users/gcmurphy/orgs","repos_url":"https://api.github.com/users/gcmurphy/repos","events_url":"https://api.github.com/users/gcmurphy/events{/privacy}","received_events_url":"https://api.github.com/users/gcmurphy/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2016-05-02T17:20:12Z","updated_at":"2016-05-02T22:12:50Z","closed_at":null,"body":"Failure to use parameterized SQL queries could lead to SQL injection:\r\n\r\n * https://github.com/01org/ciao/blob/master/ciao-controller/internal/datastore/sqlite3db.go#L1007\r\n * https://github.com/01org/ciao/blob/master/ciao-controller/internal/datastore/sqlite3db.go#L1119\r\n * https://github.com/01org/ciao/blob/master/ciao-controller/internal/datastore/sqlite3db.go#L1431\r\n * https://github.com/01org/ciao/blob/master/ciao-controller/internal/datastore/sqlite3db.go#L1432\r\n * https://github.com/01org/ciao/blob/master/ciao-controller/internal/datastore/sqlite3db.go#L1448\r\n * https://github.com/01org/ciao/blob/master/ciao-controller/internal/datastore/sqlite3db.go#L1467\r\n * https://github.com/01org/ciao/blob/master/ciao-controller/internal/datastore/sqlite3db.go#L1532\r\n\r\nShould use a prepared statement of similar instead of fmt.Sprintf here. \r\n"},"comment":{"url":"https://api.github.com/repos/01org/ciao/issues/comments/216381124","html_url":"https://github.com/01org/ciao/issues/81#issuecomment-216381124","issue_url":"https://api.github.com/repos/01org/ciao/issues/81","id":216381124,"user":{"login":"kaccardi","id":3188858,"avatar_url":"https://avatars.githubusercontent.com/u/3188858?v=3","gravatar_id":"","url":"https://api.github.com/users/kaccardi","html_url":"https://github.com/kaccardi","followers_url":"https://api.github.com/users/kaccardi/followers","following_url":"https://api.github.com/users/kaccardi/following{/other_user}","gists_url":"https://api.github.com/users/kaccardi/gists{/gist_id}","starred_url":"https://api.github.com/users/kaccardi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kaccardi/subscriptions","organizations_url":"https://api.github.com/users/kaccardi/orgs","repos_url":"https://api.github.com/users/kaccardi/repos","events_url":"https://api.github.com/users/kaccardi/events{/privacy}","received_events_url":"https://api.github.com/users/kaccardi/received_events","type":"User","site_admin":false},"created_at":"2016-05-02T22:12:49Z","updated_at":"2016-05-02T22:12:49Z","body":"Hi, thanks!  I have created a pull request with the changes to address this issue, I'd appreciate your review. \r\n#87 \r\n"}}