Claude Opus generated a Flask endpoint with SQL injection. BrassCoders caught it in one scan—two CRITICAL findings plus Bandit—all pointing to line 22. The fix: swap string formatting for parameterized queries. One re-scan shows both CRITICALs gone. Read more → https://brss.fyi/x1f5
brss.fyiFrom SQL Injection to Clean: Fixing a B608 Finding in AI-Generated Flask CodeBefore-and-after walkthrough: BrassCoders finds SQL injection in a corpus Flask endpoint, the parameterized fix, and what the re-scan shows — including the one Semgrep taint finding that remains.
0 reposts0 likes