Function DetectAndReadInput

cmd/gosqlx/internal/cmdutil/input.go:57–103

DetectAndReadInput robustly detects whether input is a file path or direct SQL and returns the SQL content with proper validation and security limits.

(input string)

// DetectAndReadInput robustly detects whether input is a file path or direct SQL
// and returns the SQL content with proper validation and security limits.
func DetectAndReadInput(input string) (*InputResult, error) {
	if input == "" {
		return nil, fmt.Errorf("empty input provided")
	}

	input = strings.TrimSpace(input)

	_, statErr := os.Stat(input)
	if statErr == nil {
		if err := validate.ValidateInputFile(input); err != nil {
			return nil, fmt.Errorf("security validation failed: %w", err)
		}

		content, err := os.ReadFile(input) // #nosec G304
		if err != nil {
			return nil, fmt.Errorf("failed to read file %s: %w", input, err)
		}

		if len(content) == 0 {
			return nil, fmt.Errorf("file is empty: %s", input)
		}

		return &InputResult{
			Type:    InputTypeFile,
			Content: content,
			Source:  input,
		}, nil
	}

	if strings.Contains(input, string(filepath.Separator)) || strings.HasSuffix(strings.ToLower(input), ".sql") {
		return nil, fmt.Errorf("invalid file path: %w", statErr)
	}

	if !LooksLikeSQL(input) {
		return nil, fmt.Errorf("input does not appear to be valid SQL or a file path: %s", input)
	}

	if len(input) > MaxFileSize {
		return nil, fmt.Errorf("SQL query too long: %d characters (max %d)", len(input), MaxFileSize)
	}

	return &InputResult{
		Type:    InputTypeSQL,
		Content: []byte(input),
		Source:  "direct input",
	}, nil
}

// IsValidSQLFileExtension checks if the file extension is acceptable for SQL.
func IsValidSQLFileExtension(ext string) bool {