PS: Prettify.

MathiasVP · MathiasVP · commit 1e1e4c6743f4 · 2025-10-15T11:33:42.000+01:00
diff --git a/powershell/ql/lib/semmle/code/powershell/security/SqlInjectionCustomizations.qll b/powershell/ql/lib/semmle/code/powershell/security/SqlInjectionCustomizations.qll
@@ -79,8 +79,7 @@ module SqlInjection {
     override string getSinkType() { result = "call to Invoke-Sqlcmd" }
 
     override predicate allowImplicitRead(DataFlow::ContentSet cs) {
-      cs.getAStoreContent().(DataFlow::Content::KnownKeyContent).getIndex().asString().toLowerCase() =
-        query()
+      cs.getAStoreContent().(DataFlow::Content::KnownKeyContent).getIndex().stringMatches(query())
     }
   }
 

Original file line number	Diff line number	Diff line change
`@@ -79,8 +79,7 @@ module SqlInjection {`
`79`	`79`	`override string getSinkType() { result = "call to Invoke-Sqlcmd" }`
`80`	`80`
`81`	`81`	`override predicate allowImplicitRead(DataFlow::ContentSet cs) {`
`82`		`- cs.getAStoreContent().(DataFlow::Content::KnownKeyContent).getIndex().asString().toLowerCase() =`
`83`		`- query()`
	`82`	`+ cs.getAStoreContent().(DataFlow::Content::KnownKeyContent).getIndex().stringMatches(query())`
`84`	`83`	`}`
`85`	`84`	`}`
`86`	`85`