fraiseql-core 2.16.0

Core execution engine for FraiseQL v2 - Compiled GraphQL over SQL
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

//! Security tests for FraiseQL core.
//!
//! Covers SQL injection prevention, Row-Level Security enforcement,
//! field-level RBAC, and path/identifier injection hardening.

mod security {
    // SQL injection prevention
    //
    // The former `tenancy_sql_injection_test` (SR-2/AA1) suite is gone with its
    // subject: the string-interpolating `tenancy::where_clause*` helpers were
    // deleted in #736 — no tenancy SQL-generation path exists to inject into.
    mod path_injection_tests;
    mod security_sql_identifier_test;
    mod where_sql_injection_prevention;

    // End-to-end injection and RBAC pipeline
    mod e2e_field_rbac_pipeline;
    mod e2e_sql_injection_integration;

    // Row-Level Security and Field RBAC integration
    mod integration_executor_field_rbac;
    mod integration_field_rbac_errors;
    mod integration_field_rbac_runtime;
    mod integration_field_rbac_toml;
    mod integration_rls;

    // APQ / RLS cache key isolation (pure unit tests, no database required)
    mod apq_rls_isolation_test;
}