Skip to main content

scan_sensitive_public_synonym

plsql_ir::fact_emit

Function scan_sensitive_public_synonym 

Source 
pub fn scan_sensitive_public_synonym(
    unit_logical_id: &str,
    source: &str,
) -> Vec<SynonymFactSite>
Expand description

SEC005: a CREATE [OR REPLACE] PUBLIC SYNONYM <syn> FOR <tgt> where the synonym or its target name matches the sensitivity heuristic. Literal-masked, conservative: a non-public synonym or a benign name yields no fact.