Skip to main content

detect_injection_ast

sz_orm_sql_validator

Function detect_injection_ast 

Source 
pub fn detect_injection_ast(sql: &str) -> ValidationResult
Expand description

Deep injection detection based on AST (token sequence).

More precise than simple string matching; detects the following patterns:

  • DDL/DML keywords mixed into a statement (e.g. DROP/ALTER/TRUNCATE appearing in SELECT)
  • Multi-statement injection (semicolon followed by another statement)
  • EXEC / EXECUTE calls (commonly used in injection attacks)
  • Boolean blind injection pattern (OR followed by a tautology condition)