Flask ORM (?) SQL Injection

[tonybaloney]

Investigate and add inspections for SQL Injection techniques for Flask ORM.

[Nkarnaud]

Am happy to be part of this team

[tonybaloney]

@Nkarnaud can you answer these questions

1. What does Flask use for connecting and querying the database by default?
2. Does flask-sqlalchemy add any https://flask.palletsprojects.com/en/1.1.x/tutorial/views/
   https://flask-sqlalchemy.palletsprojects.com/en/2.x/
3. Fork this repo, https://github.com/tonybaloney/pycharm-security-testing then install the plugin into PyCharm and see how it handles the existing demos.
4. Write a demo Flask app that can be used for testing, add some SQL injection vulnerabilities into it.

[Odame]

@tonybaloney & @Nkarnaud Is this issue picked up by anyone?
I would like to work give a helping hand in this project and I think this issue fits me.

[tonybaloney]

@Odame this is still up for grabs if you want to help