Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

test prepared statements with acra-censor #283

Merged
merged 5 commits into from
Nov 12, 2018
Merged

test prepared statements with acra-censor #283

merged 5 commits into from
Nov 12, 2018

Conversation

Lagovas
Copy link
Collaborator

@Lagovas Lagovas commented Nov 12, 2018

  • add usage of prepared statements in acra-censor tests and refactored connections to re-use the same code (connections with different drivers and text/binary prepared statements per db type) in several places
  • add query as is if can't normalize to QueryIgnore handler to allow ignore queries that can't parse

Co-Authored-By: Lagovas <[email protected]>
@vixentael
Copy link
Collaborator

So, at the end:

AcraCensor can filter prepare statements only using QueryCapture/QueryIgnore (by comparing incoming SQL char-by-char with SQL from config file). AcraCensor can't apply allow/deny rules for SQL requests with prepared statements.

@Lagovas Lagovas merged commit d09718f into cossacklabs:master Nov 12, 2018
@Lagovas Lagovas deleted the lagovas/test-prepared-statements branch December 17, 2018 14:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants