Code Review Nedir? Nasıl Yapılır? Örneklerle Anlatım!

query = "SELECT * FROM users WHERE username=%s AND password=%s"
cursor.execute(query, (username, password))

import os
user_input = input("Enter a file name: ")
os.system(f"cat {user_input}")

import os
import shlex
user_input = input("Enter a file name: ")
os.system(f"cat {shlex.quote(user_input)}")

String fileName = request.getParameter("file");
File file = new File("static/" + fileName);
FileInputStream fis = new FileInputStream(file);

String fileName = request.getParameter("file");
File file = new File("static/" + fileName).getCanonicalFile();
if (!file.getPath().startsWith("static/")) {
    throw new SecurityException("Invalid file path");
}
FileInputStream fis = new FileInputStream(file);

using System.Runtime.Serialization.Formatters.Binary;
// ...
BinaryFormatter formatter = new BinaryFormatter();
object deserializedObject = formatter.Deserialize(stream);

using Newtonsoft.Json;
// ...
object deserializedObject = JsonConvert.DeserializeObject<ObjectType>(json);

class ApplicationController < ActionController::Base
  skip_before_action :verify_authenticity_token
end

class ApplicationController < ActionController::Base
  protect_from_forgery with: :exception
end

app.get('/admin', (req, res) => {
  res.sendFile(path.join(__dirname, 'admin.html'));
});

app.get('/admin', (req, res) => {
  if (!req.isAuthenticated() || !req.user.isAdmin) {
    return res.sendStatus(403);
  }
  res.sendFile(path.join(__dirname, 'admin.html'));
});

try {
    // ...
} catch (Exception $e) {
    echo "Error: " . $e->getMessage();
}

try {
    // ...
} catch (Exception $e) {
    error_log("Error: " . $e->getMessage());
    header('HTTP/1.1 500 Internal Server Error');
    exit();
}

http.HandleFunc("/redirect", func(w http.ResponseWriter, r *http.Request) {
    target := r.URL.Query().Get("target")
    http.Redirect(w, r, target, http.StatusFound)
})

http.HandleFunc("/redirect", func(w http.ResponseWriter, r *http.Request) {
    target := r.URL.Query().Get("target")
    if strings.HasPrefix(target, "https://turkhackteam.com") {
        http.Redirect(w, r, target, http.StatusFound)
    } else {
        http.Error(w, "Unauthorized redirect target", http.StatusUnauthorized)
    }
})

DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
DocumentBuilder db = dbf.newDocumentBuilder();
Document doc = db.parse(new InputSource(new StringReader(xmlString)));

DocumentBuilderFactory dbf = DocumentBuilderFactory.newInstance();
dbf.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);
dbf.setFeature("http://xml.org/sax/features/external-general-entities", false);
dbf.setFeature("http://xml.org/sax/features/external-parameter-entities", false);
dbf.setFeature("http://apache.org/xml/features/nonvalidating/load-external-dtd", false);
DocumentBuilder db = dbf.newDocumentBuilder();
Document doc = db.parse(new InputSource(new StringReader(xmlString)));