com.cflint.plugins.core.SelectStarChecker Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of CFLint Show documentation

A static code analysis tool for ColdFusion (in the spirit of FindBugs and Lint). With CFLint, you are able to analyze your ColdFusion code base for code violations.

There is a newer version: 1.5.0

Show newest version

package com.cflint.plugins.core;

import com.cflint.BugList;
import com.cflint.plugins.CFLintScannerAdapter;
import com.cflint.plugins.Context;

import cfml.parsing.cfscript.CFExpression;
import cfml.parsing.cfscript.script.CFScriptStatement;
import net.htmlparser.jericho.Element;
import ro.fortsoft.pf4j.Extension;

@Extension
public class SelectStarChecker extends CFLintScannerAdapter {
    final CharSequence selectStar = "select*";

    @Override
    public void expression(final CFExpression expression, final Context context, final BugList bugs) {

    }

    @Override
    public void expression(final CFScriptStatement expression, final Context context, final BugList bugs) {

    }

    @Override
    public void element(final Element element, final Context context, final BugList bugs) {
        final String tagName = element.getName();
        if (tagName.equals("cfquery")) {

            String queryGuts = element.getContent().toString().replaceAll("\\s+", "");
            queryGuts = queryGuts.toLowerCase();

            if (queryGuts.contains(selectStar)) {
                context.addMessage("SQL_SELECT_STAR", null);
            }
        }
    }
}