`hi,
i have a procedure which will receive query in in parameter , I’m running the incoming query inside procedure, Checkmarx tool detecting SQL injection in my_cursor. how to solve this, i tried to introduce dbms_assert.noop function but no use
`create procedure test(common_query in varchar2)
as
sql_qry varchar2(2000);
Type cursor_type is ref cursor;
my_cursor cursor_type;
begin
sql_qry:= common_query;
open my_cursor for sql_qry;
fetch my_cursor into :name;
close my_cursor ;
end;`
i tried to introduce dbms_assert.noop function but not resolving `
New contributor
Tamil Mani is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.