Method isSystemTable

pkg/sql/security/scanner.go:898–916

isSystemTable checks if a table name refers to a system table using precise matching. Uses prefix matching and exact name matching to avoid false positives.

(tableName string)

// isSystemTable checks if a table name refers to a system table using precise matching.
// Uses prefix matching and exact name matching to avoid false positives.
func (s *Scanner) isSystemTable(tableName string) bool {
	tableLower := strings.ToLower(tableName)

	// Check exact matches first
	for _, name := range systemTableNames {
		if tableLower == name {
			return true
		}
	}

	// Check prefix matches (e.g., "information_schema.tables", "pg_class")
	for _, prefix := range systemTablePrefixes {
		if strings.HasPrefix(tableLower, prefix) {
			return true
		}
	}

	return false
}

// scanFunctionCall checks for dangerous function usage.
func (s *Scanner) scanFunctionCall(fn *ast.FunctionCall, result *ScanResult) {