Function validateColumn

pkg/jsonfilter/jsonfilter.go:129–135

validateColumn ensures the JSON column is a bare SQL identifier before it is emitted into the query by the ent sqljson helpers. Callers are expected to set it to a known column constant, but validating here keeps safety from depending on every caller remembering to do so.

(column string)

// it to a known column constant, but validating here keeps safety from depending
// on every caller remembering to do so.
func validateColumn(column string) error {
	if !columnRegexp.MatchString(column) {
		return fmt.Errorf("invalid column %q: must be a valid identifier", column)
	}

	return nil
}

// validateFieldPath ensures the JSON field path only contains safe characters
// before it is concatenated into the SQL query by the ent sqljson helpers.