Nine security anti-patterns your linter doesn't catch

Your linter is like a spell checker for code. Great at catching typos, terrible at catching lies. It'll yell at you for a missing semicolon but won't blink at a SQL injection sitting three lines above...