Alias reference: database/sql.Stmt. Prepared statement execution methods — safe when using ? placeholders, sink when mixing with string concatenation.
.Exec()NeutralExec(args ...any) (Result, error)
Executes prepared statement. Safe with parameterized args.
.Query()NeutralQuery(args ...any) (*Rows, error)
Executes parameterized query. Safe with ? placeholders.
.QueryRow()NeutralQueryRow(args ...any) *Row
Executes parameterized single-row query. Safe with ? placeholders.
| FQN | Field | |
|---|---|---|
| database/sql.Stmt | fqns[0] |
Wrong FQN → 0 findings. Verify with: change fqns to garbage → must produce 0 results.
// standard library — no go.mod entry required
from codepathfinder.go_rule import GoDatabaseSQL