github/dbx
4
0
Fork 0
mirror of https://github.com/t8y2/dbx.git synced 2026-10-19 16:16:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(safety): scan production SQL with the connection's lexer rules

Browse Source
This commit is contained in:
ordinary being
2026-10-06 18:58:15 +08:00
committed by GitHub
parent c87351e0df
commit 8124247657
3 changed files with 71 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/fixtures/production-safety-corpus.json
Vendored
+40
View File
@@ -308,5 +308,45 @@
"active": false,
"isMutation": true,
"databases": []
},
{
"name": "sqlserver hash temp table keeps a later production delete in scope",
"dialect": "sqlserver",
"productionDatabases": ["prod_app"],
"activeDatabase": "staging",
"sql": "SELECT * FROM #tmp; DELETE FROM prod_app.dbo.users;",
"active": true,
"isMutation": true,
"databases": ["prod_app"]
},
{
"name": "sqlserver backslash string keeps a later production delete in scope",
"dialect": "sqlserver",
"productionDatabases": ["prod_app"],
"activeDatabase": "staging",
"sql": "SELECT 'dir\\'; DELETE FROM prod_app.dbo.users;",
"active": true,
"isMutation": true,
"databases": ["prod_app"]
},
{
"name": "mysql hash comment keeps a commented delete out of scope",
"dialect": "mysql",
"productionDatabases": ["prod_app"],
"activeDatabase": "staging",
"sql": "SELECT 1; # DELETE FROM prod_app.users",
"active": false,
"isMutation": false,
"databases": []
},
{
"name": "mysql backslash escape keeps the write inside the literal",
"dialect": "mysql",
"productionDatabases": ["prod_app"],
"activeDatabase": "staging",
"sql": "SELECT 'it\\'s; DELETE FROM prod_app.users;'",
"active": false,
"isMutation": false,
"databases": []
}
]