diff --git a/java-checks-test-sources/default/src/main/java/checks/SQLInjection.java b/java-checks-test-sources/default/src/main/java/checks/SQLInjection.java index 925401b72d..7a678f26a1 100644 --- a/java-checks-test-sources/default/src/main/java/checks/SQLInjection.java +++ b/java-checks-test-sources/default/src/main/java/checks/SQLInjection.java @@ -19,7 +19,7 @@ class SQLInjection { private static final String CONSTANT = "SELECT * FROM TABLE"; - public void method(String param, String param2, EntityManager entityManager) { + public void method(String param, String param2, EntityManager entityManager, jakarta.persistence.EntityManager entityManager2) { try { Connection conn = DriverManager.getConnection("url", "user1", "password"); Statement stmt = conn.createStatement(); @@ -83,6 +83,7 @@ public void method(String param, String param2, EntityManager entityManager) { String sql = "SELECT lastname, firstname FROM employee where uid = '" + param + "'"; entityManager.createNativeQuery(sql); // Noncompliant + entityManager2.createNativeQuery(sql); // Noncompliant String concatenatedQuery0 = "SELECT * "; concatenatedQuery0 += "FROM " + param; diff --git a/java-checks/src/main/java/org/sonar/java/checks/SQLInjectionCheck.java b/java-checks/src/main/java/org/sonar/java/checks/SQLInjectionCheck.java index c24d2189e5..f31877645c 100644 --- a/java-checks/src/main/java/org/sonar/java/checks/SQLInjectionCheck.java +++ b/java-checks/src/main/java/org/sonar/java/checks/SQLInjectionCheck.java @@ -64,7 +64,7 @@ public class SQLInjectionCheck extends IssuableSubscriptionVisitor { .withAnyParameters() .build(), MethodMatchers.create() - .ofTypes("javax.persistence.EntityManager") + .ofTypes("javax.persistence.EntityManager", "jakarta.persistence.EntityManager") .names("createNativeQuery", "createQuery") .withAnyParameters() .build(),