Bruno

The following script is miss parsed making anything after last `myvar` assignment all string content. The code is valid, I tested it in bash `myvar="${myvar//\\\\/\\}"`. Looks like the issue is...

False positive on "Query built by concatenation with a possibly-untrusted string" - "java/concatenated-sql-query"

1

False positive on `Query built by concatenation with a possibly-untrusted string` - `java/concatenated-sql-query` * https://github.com/github/codeql/blob/ff0c1ca2d6401e63914f20b650b49c2b82cac148/java/ql/src/Security/CWE/CWE-089/SqlConcatenated.ql We have a constant value from enum ``` public enum CommentType { REVIEW_SIMPLE_COMMENT("comment.review.simple"), SIMPLE_COMMENT("comment.simple"); private...