extensions: - addsTo: pack: codeql/javascript-all extensible: sinkModel data: - ["@sap/hana-client", "Member[createConnection].ReturnValue.Member[exec,prepare].Argument[0]", "sql-injection"] - ["hdb.Client", "Member[exec,prepare,execute].Argument[0]", "sql-injection"] - ["@sap/hdbext", "Member[loadProcedure].Argument[2]", "sql-injection"] - ["@sap/hana-client/extension/Stream", "Member[createProcStatement].Argument[1]", "sql-injection"] - addsTo: pack: codeql/javascript-all extensible: typeModel data: - ["hdb.Client", "hdb", "Member[createClient].ReturnValue"] - ["hdb.Client", "@sap/hdbext", "Member[middleware].ReturnValue.GuardedRouteHandler.Parameter[0].Member[db]"]