---
id: WC-SECU-001
name: 禁止字符串拼接防范SQL注入
severity: error  # error=阻断, warning=警告
source: J000078
tool: auto  # auto-manual-auto: detected by tool / manual check / AST-grep
category: wc-security
description: |
  禁止字符串拼接防范SQL注入

  对应浩鲸规范 J000078。

check:
  type: ast-grep  # ast-grep / pmd-custom / spotbugs / checkstyle / manual
  pattern: TODO

notes: "PreparedStatement usage — PMD:UsePreparedStatement"