Struct SqlSecurity 

pub struct SqlSecurity;

SQL identifier validation and escaping utilities.

Implementations

impl SqlSecurity

pub fn escape_identifier(identifier: &str) -> Result<String>

Validates and escapes a SQL identifier (table name, column name, etc.).

This function ensures that user-provided identifiers are safe to use in SQL queries by validating their format and properly escaping them.

Arguments

• identifier - The identifier to validate and escape

Returns

• Ok(String) - The safely escaped identifier ready for SQL use
• Err(TermError) - If the identifier is invalid or potentially malicious

Security

This function prevents SQL injection by:

• Validating identifier format against allowed patterns
• Checking against a blocklist of dangerous patterns
• Properly escaping identifiers using double quotes
• Limiting identifier length to prevent DoS attacks

Examples

use term_guard::security::SqlSecurity;

// Valid identifiers
assert!(SqlSecurity::escape_identifier("customer_id").is_ok());
assert!(SqlSecurity::escape_identifier("table1").is_ok());

// Invalid identifiers  
assert!(SqlSecurity::escape_identifier("id; DROP TABLE users--").is_err());
assert!(SqlSecurity::escape_identifier(&"very_long_name_".repeat(100)).is_err());

pub fn validate_identifier(identifier: &str) -> Result<()>

Validates a SQL identifier without escaping it.

This function checks if an identifier is safe to use but doesn’t escape it. Useful for cases where you need validation but will use the identifier in a different context.

pub fn validate_regex_pattern(pattern: &str) -> Result<String>

Validates a regex pattern for safety.

This function ensures that user-provided regex patterns are safe to use in SQL queries and won’t cause ReDoS attacks or other security issues.

pub fn validate_sql_expression(expression: &str) -> Result<()>

Validates a custom SQL expression for safety.

This function performs security validation on user-provided SQL expressions to prevent SQL injection and other attacks while still allowing legitimate validation expressions.