nsinnovations/erpnext
2
0
Fork 0
mirror of https://github.com/frappe/erpnext.git synced 2026-08-17 00:18:39 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix: suppress safe semgrep sql false positives

Browse Source
This commit is contained in:
copilot-swe-agent[bot]
2026-06-10 05:36:26 +00:00
committed by GitHub
parent c922cae520
commit ecbf0bf0b8
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
erpnext/accounts/doctype/payment_entry/payment_entry.py
View File

@@ -2329,6 +2329,8 @@ def get_orders_to_be_billed(
grand_total_field = "grand_total"
rounded_total_field = "rounded_total"
# nosemgrep: frappe-semgrep-rules.rules.security.frappe-sql-format-injection
# Safe because voucher_type / party_type / total field names are selected from fixed allowlists above.
orders = frappe.db.sql(
"""
select
@@ -2406,6 +2408,8 @@ def get_negative_outstanding_invoices(
grand_total_field = "grand_total"
rounded_total_field = "rounded_total"
# nosemgrep: frappe-semgrep-rules.rules.security.frappe-sql-format-injection
# Safe because voucher_type / party_type / account / total field names are selected from fixed allowlists above.
return frappe.db.sql(
"""
select