Unverified50% confidenceFactExact time
The deterministic rule set of open-code-review covers high-frequency, high-risk issue types such as NPE, thread safety, XSS, and SQL injection.
1
Sources
50%
Confidence
Long-term
Relevance
7/24/2026
First Seen
Sources
阿里开源代码审查工具open-code-review：确定性流水线+LLM双引擎解析
Related Claims
UnverifiedNL2SQL场景应对生成的SQL进行安全校验，采用白名单只允许只读操作、语法树解析检测危险操作、只读账号执行、自动添加LIMIT等策略防止DELETE、DROP TABLE等破坏性语句68% similarVerifiedCodeQL 将代码解析为关系数据库，允许用户以类 SQL 语法编写查询来检测特定漏洞模式，强项在于精确性和可重现性68% similarUnverified正则表达式、有限状态机、SQL 查询属于确定性程序66% similarUnverifiedSQL静态代码分析是在不实际执行SQL的情况下通过解析语法树检测潜在质量问题的技术65% similarUnverifiedSupervision 抽象出 Detections 标准数据结构，内部使用 NumPy 数组存储 xyxy 格式边界框坐标、置信度、类别 ID、追踪 ID 及可选分割掩码64% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/608432API
curl https://kongchang.com/api/v1/knowledge/claims/608432MCP
get_claim(id=608432)