openSUSE/scanny — pull request #40 by LTe (2012-06-12 14:31:27+00:00)
Title: SQL injection check

```
#low CWE-89 \.find[\w_]*\s*[\(]*.*params\s*\[
#low CWE-89 \.find[\w_]*\s*[\(]*.*conditions\s*=>
#medium CWE-89 \.find[\w_]*\s*[\(]*.*conditions\s*=>.*#\{.*\}
#high CWE-89 \.find[\w_]*\s*[\(]*.*(conditions|limit)\s*=>.*params\s*\[
#high CWE-89 \.find[\w_]*\s*[\(]*.*(conditions|limit)\s*=>.*session\s*\[
```

This check use regexp matching for method name (https://github.com/openSUSE/machete/pull/6)