Skip to content

fix(sql-sanitizer): fix UPDATE prose false block and missed inline li… #191

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
lucarlig merged 12 commits into from
Oct 5, 2026
Merged

fix(sql-sanitizer): fix UPDATE prose false block and missed inline li… #191

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
bdf9397
fix(sql-sanitizer): fix UPDATE prose false block and missed inline li…
prakhar-singh1928 Oct 1, 2026
9047470
fix(sql-sanitizer): update interpolation_marker test to use bind param
prakhar-singh1928 Oct 1, 2026
6868cfd
fix(sql-sanitizer): fix schema-qualified UPDATE bypass and non-SQL fi…
prakhar-singh1928 Oct 1, 2026
f03a04b
style(sql-sanitizer): collapse three_part_name test call to single li…
prakhar-singh1928 Oct 1, 2026
9f6e6bc
style(sql-sanitizer): trim verbose comments to 1-2 lines
prakhar-singh1928 Oct 1, 2026
7910558
fix(sql-sanitizer): cover UPDATE aliases/ONLY/quoted-schema, SQLite ?…
prakhar-singh1928 Oct 2, 2026
cbe145d
style(sql-sanitizer): collapse multi-line find_issues calls for rustfmt
prakhar-singh1928 Oct 2, 2026
0e8b7ca
style(sql-sanitizer): expand two test call sites to match rustfmt
prakhar-singh1928 Oct 2, 2026
4f3d2fb
fix(sql-sanitizer): add word boundary to hex literal pattern to preve…
prakhar-singh1928 Oct 2, 2026
11e0f2f
fix(sql-sanitizer): accept quoted UPDATE aliases; require paired SQL …
prakhar-singh1928 Oct 2, 2026
0c4e7f8
fix(sql-sanitizer): fix test message mismatch and SELECT 1 gate expec…
prakhar-singh1928 Oct 2, 2026
9e93dca
fix(sql-sanitizer): enable dot-all in SQL_CONTEXT_RE so multiline SQL…
prakhar-singh1928 Oct 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion plugins/rust/python-package/sql_sanitizer/Cargo.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
[package]
name = "sql_sanitizer"
version = "0.1.3"
version = "0.1.4"
edition.workspace = true
authors.workspace = true
license.workspace = true
Expand Down
2 changes: 1 addition & 1 deletion plugins/rust/python-package/sql_sanitizer/cpex_sql_sanitizer/plugin-manifest.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
description: "Rust-backed SQL statement sanitizer — blocks risky DDL/DML and WHERE-clause-less mutations"
author: "ContextForge Contributors"
version: "0.1.3"
version: "0.1.4"
kind: "cpex_sql_sanitizer.sql_sanitizer.SQLSanitizerPlugin"
available_hooks:
- "prompt_pre_fetch"
Expand Down
4 changes: 3 additions & 1 deletion plugins/rust/python-package/sql_sanitizer/src/config.rs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,9 @@ pub struct SqlSanitizerConfig {
pub block_update_without_where: bool,
/// Strip `--` and `/* */` comments before analysis.
pub strip_comments: bool,
/// Heuristic check for non-parameterized interpolation (`+`, `{…}`, `%.`).
/// Require parameterized queries. Flags interpolation markers (`+`, `%s`, `{…}`)
/// and inline literals (`42`, `'Alice'`). Non-SQL fields are skipped via a keyword
/// gate. Most precise when `fields` names only the SQL-bearing fields.
pub require_parameterization: bool,
/// Return `continue_processing=False` when a violation is found.
pub block_on_violation: bool,
Expand Down
Loading
Loading