Function TestScanSQL_TimeBasedPatterns

pkg/sql/security/scanner_test.go:361–385

(t *testing.T)

}

func TestScanSQL_TimeBasedPatterns(t *testing.T) {
	scanner := NewScanner()

	testCases := []string{
		"SELECT * FROM users WHERE id = 1 AND SLEEP(5)",
		"SELECT * FROM users; WAITFOR DELAY '0:0:5'",
		"SELECT pg_sleep(10)",
		"SELECT BENCHMARK(1000000, MD5('test'))",
	}

	for _, sql := range testCases {
		result := scanner.ScanSQL(sql)
		hasTimeBased := false
		for _, f := range result.Findings {
			if f.Pattern == PatternTimeBased {
				hasTimeBased = true
				break
			}
		}

		if !hasTimeBased {
			t.Errorf("expected time-based pattern in: %s", sql)
		}
	}
}

func TestScanSQL_OutOfBandPatterns(t *testing.T) {
	scanner := NewScanner()