Struct SafeSqlGuard 

pub struct SafeSqlGuard {
    pub policy: GuardPolicy,
}

防全表 UPDATE/DELETE 攻击守卫

通过 SQL 解析检测是否存在 WHERE 子句，对全表 UPDATE/DELETE 操作进行拦截。

示例

use sz_orm_core::guard::{SafeSqlGuard, GuardPolicy, GuardError};

let guard = SafeSqlGuard::new(GuardPolicy::Strict);

// 拦截无 WHERE 子句的 UPDATE
assert!(matches!(
    guard.check("UPDATE users SET name = 'a'"),
    Err(GuardError::FullTableUpdate { .. })
));

// 允许带 WHERE 子句的 UPDATE
assert!(guard.check("UPDATE users SET name = 'a' WHERE id = 1").is_ok());

Fields

policy: GuardPolicy

策略

Implementations

impl SafeSqlGuard

pub fn new(policy: GuardPolicy) -> Self

创建守卫实例

pub fn strict() -> Self

创建默认（严格）守卫

pub fn permissive() -> Self

创建宽松守卫

pub fn disabled() -> Self

创建关闭守卫

pub fn check(&self, sql: &str) -> GuardResult<()>

检查 SQL 是否安全（拦截全表 UPDATE/DELETE）

pub fn check_update(&self, sql: &str) -> GuardResult<()>

检查 SQL 是否安全（与 check 等价，但明确表示检查 UPDATE）

pub fn check_delete(&self, sql: &str) -> GuardResult<()>

检查 SQL 是否安全（与 check 等价，但明确表示检查 DELETE）

Trait Implementations

impl Clone for SafeSqlGuard

fn clone(&self) -> SafeSqlGuard

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for SafeSqlGuard

impl Debug for SafeSqlGuard

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for SafeSqlGuard

fn default() -> Self

Returns the “default value” for a type.