From aa88f2dbe5820ff9c0928f0baa79446cc7434e9b Mon Sep 17 00:00:00 2001 From: Ari Pollak Date: Sat, 22 Feb 2025 14:15:29 -0500 Subject: [PATCH] Fix example for S611 (#16316) ## Summary * Existing example did not include RawSQL() call like it should * Also clarify the example a bit to make it clearer that the code is not secure ## Test Plan N/A, only documentation updated --- .../ruff_linter/src/rules/flake8_bandit/rules/django_raw_sql.rs | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/crates/ruff_linter/src/rules/flake8_bandit/rules/django_raw_sql.rs b/crates/ruff_linter/src/rules/flake8_bandit/rules/django_raw_sql.rs index eacabbe8d3141..338bcb44a1200 100644 --- a/crates/ruff_linter/src/rules/flake8_bandit/rules/django_raw_sql.rs +++ b/crates/ruff_linter/src/rules/flake8_bandit/rules/django_raw_sql.rs @@ -18,7 +18,7 @@ use crate::checkers::ast::Checker; /// from django.db.models.expressions import RawSQL /// from django.contrib.auth.models import User /// -/// User.objects.annotate(val=("%secure" % "nos", [])) +/// User.objects.annotate(val=RawSQL("%s" % input_param, [])) /// ``` /// /// ## References