Translate SQL injection messages to English

src/scanner/sql_injection.py

@@ -76,12 +76,12 @@ class SQLInjectionVisitor(ast.NodeVisitor):
                 self.vulnerabilities.append({
                     "id": "sql-injection-fstring",
                     "severity": "CRITICAL",
-                    "title": "SQL Injection: f-string으로 SQL 쿼리 생성",
-                    "description": "f-string을 사용하여 SQL 쿼리에 변수를 직접 삽입하고 있습니다.",
+                    "title": "SQL Injection: SQL query built with f-string",
+                    "description": "Variables are directly interpolated into SQL query using f-string.",
                     "line_number": line_number,
                     "code_snippet": code_snippet,
                     "vulnerable_pattern": "f-string interpolation",
-                    "recommendation": "파라미터화된 쿼리를 사용하세요: cursor.execute('SELECT * FROM users WHERE id=%s', (user_id,))",
+                    "recommendation": "Use parameterized queries: cursor.execute('SELECT * FROM users WHERE id=%s', (user_id,))",
                     "scanner": "sql_injection",
                 })
 
@@ -103,12 +103,12 @@ class SQLInjectionVisitor(ast.NodeVisitor):
                 self.vulnerabilities.append({
                     "id": "sql-injection-concat",
                     "severity": "CRITICAL",
-                    "title": "SQL Injection: 문자열 연결로 SQL 쿼리 생성",
-                    "description": "+ 연산자로 SQL 쿼리를 동적으로 생성하고 있습니다.",
+                    "title": "SQL Injection: SQL query built with string concatenation",
+                    "description": "SQL query is dynamically constructed using the + operator.",
                     "line_number": line_number,
                     "code_snippet": code_snippet,
                     "vulnerable_pattern": "string concatenation",
-                    "recommendation": "파라미터화된 쿼리를 사용하세요",
+                    "recommendation": "Use parameterized queries",
                     "scanner": "sql_injection",
                 })
 
@@ -126,12 +126,12 @@ class SQLInjectionVisitor(ast.NodeVisitor):
                     self.vulnerabilities.append({
                         "id": "sql-injection-percent",
                         "severity": "CRITICAL",
-                        "title": "SQL Injection: % 포맷팅으로 SQL 쿼리 생성",
-                        "description": "% 연산자로 SQL 쿼리에 변수를 직접 삽입하고 있습니다.",
+                        "title": "SQL Injection: SQL query built with % formatting",
+                        "description": "Variables are directly inserted into SQL query using the % operator.",
                         "line_number": line_number,
                         "code_snippet": code_snippet,
                         "vulnerable_pattern": "percent formatting",
-                        "recommendation": "파라미터화된 쿼리를 사용하세요",
+                        "recommendation": "Use parameterized queries",
                         "scanner": "sql_injection",
                     })
 
@@ -150,12 +150,12 @@ class SQLInjectionVisitor(ast.NodeVisitor):
                     self.vulnerabilities.append({
                         "id": "sql-injection-format",
                         "severity": "CRITICAL",
-                        "title": "SQL Injection: .format()으로 SQL 쿼리 생성",
-                        "description": ".format() 메서드로 SQL 쿼리를 동적으로 생성하고 있습니다.",
+                        "title": "SQL Injection: SQL query built with .format()",
+                        "description": "SQL query is dynamically constructed using the .format() method.",
                         "line_number": line_number,
                         "code_snippet": code_snippet,
                         "vulnerable_pattern": "string.format()",
-                        "recommendation": "파라미터화된 쿼리를 사용하세요",
+                        "recommendation": "Use parameterized queries",
                         "scanner": "sql_injection",
                     })
 
@@ -188,12 +188,12 @@ class SQLInjectionVisitor(ast.NodeVisitor):
                 self.vulnerabilities.append({
                     "id": f"sql-injection-{func_name}",
                     "severity": "CRITICAL",
-                    "title": f"SQL Injection: {func_name}()에 동적 SQL 쿼리 사용",
-                    "description": f"{func_name}() 메서드에 동적으로 생성된 SQL 쿼리를 전달하고 있습니다.",
+                    "title": f"SQL Injection: Dynamic SQL query in {func_name}()",
+                    "description": f"A dynamically constructed SQL query is passed to the {func_name}() method.",
                     "line_number": line_number,
                     "code_snippet": code_snippet,
                     "vulnerable_pattern": f"dynamic SQL in {func_name}()",
-                    "recommendation": "파라미터화된 쿼리를 사용하세요",
+                    "recommendation": "Use parameterized queries",
                     "scanner": "sql_injection",
                 })
 
@@ -261,12 +261,12 @@ def check_sql_pattern_regex(code: str) -> List[Dict[str, Any]]:
             vulnerabilities.append({
                 "id": "sql-injection-regex",
                 "severity": "HIGH",
-                "title": "SQL Injection 가능성: f-string 사용 탐지",
-                "description": "SQL 쿼리에 f-string 변수 삽입이 의심됩니다.",
+                "title": "Potential SQL Injection: f-string usage detected",
+                "description": "Suspected f-string variable interpolation in SQL query.",
                 "line_number": line_num,
                 "code_snippet": line.strip(),
                 "vulnerable_pattern": "f-string with SQL keywords",
-                "recommendation": "파라미터화된 쿼리 사용 권장",
+                "recommendation": "Use parameterized queries instead",
                 "scanner": "sql_injection",
             })