Expand description
SQL Validator - compile-time and runtime SQL validation
Provides validation of SQL statements for syntax correctness, parameter count matching, and structural integrity.
Modules§
- firewall
- SQL 防火墙:运行时拦截危险 SQL
Structs§
- DdlPolicy
- DDL 操作策略,控制允许的 DDL 操作类型。
- SqlComplexity
Score - SQL 复杂度评分结果。
- Whitelist
Validator - 白名单校验器,限制 SQL 只能访问允许的表和列。
Enums§
- Complexity
Level - SQL 复杂度等级。
- SqlStatement
Type - SQL statement type detected by the parser
- SqlToken
- SQL 令牌类型(简化 AST 分析用)。
- SqlValidation
Error - SQL validation errors
Functions§
- detect_
injection_ ast - 基于 AST(令牌序列)的深度注入检测。
- detect_
statement_ type - Detect the type of SQL statement
- score_
complexity - 计算 SQL 语句的复杂度评分。
- tokenize
- 简易 SQL 词法分析器,将 SQL 字符串切分为令牌序列。
- validate
- Entry-level validation that runs all checks
- validate_
column_ name - Validate column name is a valid SQL identifier
- validate_
delete - Validate a SQL DELETE statement
- validate_
insert - Validate a SQL INSERT statement
- validate_
parameter_ count - Validate parameter count in prepared statements
- validate_
select - Validate a SQL SELECT statement
- validate_
sql - Validate any SQL statement by detecting its type and applying appropriate rules
- validate_
table_ name - Validate table name is a valid SQL identifier
- validate_
update - Validate a SQL UPDATE statement
Type Aliases§
- Validation
Result - Result type for SQL validation