No dynamic stuff
no_dynamic_stuff
Description
Detects dynamic calls and other dynamic language constructs
Extended Information
Dynamic constructs cannot be checked statically, they are not found by
where-used lists and refactorings, and they can introduce injection vulnerabilities.
Dynamic tokens are also reported when containing a literal, eg. CALL METHOD go_calendar->('RESET_DAY_INFO'),
the syntax check does not resolve these either, so they behave like any other dynamic token.
Dynamic SQL is reported by rule dangerous_statement.