()
| 541 | |
| 542 | #[test] |
| 543 | fn test_legitimate_queries() { |
| 544 | let detector = SqlInjectionDetector::new(); |
| 545 | |
| 546 | let legitimate_queries = [ |
| 547 | "SELECT * FROM users WHERE id = 1", |
| 548 | "SELECT name, email FROM users WHERE created_at > '2024-01-01'", |
| 549 | "INSERT INTO users (name, email) VALUES ('John', 'john@example.com')", |
| 550 | "UPDATE users SET last_login = NOW() WHERE id = 1", |
| 551 | "SELECT u.name, p.title FROM users u JOIN posts p ON u.id = p.user_id", |
| 552 | ]; |
| 553 | |
| 554 | for query in &legitimate_queries { |
| 555 | let result = detector.analyze_query(query); |
| 556 | assert!(result.is_ok(), "Should accept legitimate query: {}", query); |
| 557 | } |
| 558 | } |
| 559 | |
| 560 | #[test] |
| 561 | fn test_sql_injection_detection() { |
nothing calls this directly
no test coverage detected