Function TestScanSQL_CommentPatterns

pkg/sql/security/scanner_test.go:331–359

(t *testing.T)

}

func TestScanSQL_CommentPatterns(t *testing.T) {
	scanner := NewScanner()

	testCases := []struct {
		sql         string
		shouldFind  bool
		description string
	}{
		{"SELECT * FROM users WHERE id = 1 --", true, "single-line comment at end"},
		{"SELECT * FROM users WHERE id = '1'--", true, "comment after quote"},
		{"SELECT * FROM users /* WHERE id = 1 */", true, "block comment"},
		{"SELECT * FROM users", false, "no comments"},
	}

	for _, tc := range testCases {
		result := scanner.ScanSQL(tc.sql)
		hasCommentFinding := false
		for _, f := range result.Findings {
			if f.Pattern == PatternComment {
				hasCommentFinding = true
				break
			}
		}

		if tc.shouldFind && !hasCommentFinding {
			t.Errorf("expected comment pattern in: %s", tc.description)
		}
	}
}

func TestScanSQL_TimeBasedPatterns(t *testing.T) {
	scanner := NewScanner()