Security of generated code

Securing generated code requires checking for the flaws a model may introduce: SQL injection, hard-coded secrets, invented or unmaintained dependencies, missing input validation. The generated code is reviewed, tested and analyzed like any untrusted code before going live.

Example

Replace a query built by text concatenation with a parameterized query.

Related concepts

The whole glossary