Conversation
…pdate CHANGELOG.md
…pdate RULES.md with new EC24 for java
|
The rule makes sense but I don't see how it's going to be implemented. There are many ways to write SQL queries, and that's not even considering ORMs. |
|
Hi @Djoums, if you want you can a look to PRs : |
|
Actually I don't think you can do it, even for the most basic cases. What if the dev writes this : string test = "select * from table". Are you going to raise a warning ? You don't know if that query will be executed or not, and you don't know if it will be limited or not (maybe there's test += " limit 25" somewhere later). You're going to raise a lot of false positives. The way I see it, a code analyzer cannot enforce this rule. This would be a job for the query engine in the DBMS, because it's the only component that knows exactly what's going to be executed and how. |
update rule-specifications for issue #239