github/datasette
1
0
Fork 0
mirror of https://github.com/simonw/datasette.git synced 2025-12-10 16:51:24 +01:00
Code Issues Projects Releases Packages Wiki Activity

Allow specific pragma functions, closes #761

Browse source
This commit is contained in:
Simon Willison 2020-05-06 10:18:31 -07:00
commit 0784f2ef9d
2 changed files with 24 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

21
datasette/utils/__init__.py
View file

@ -171,7 +171,26 @@ allowed_sql_res = [
re.compile(r"^explain with\b"),
re.compile(r"^explain query plan with\b"),
]
disallawed_sql_res = [(re.compile("pragma"), "Statement may not contain PRAGMA")]
allowed_pragmas = (
"database_list",
"foreign_key_list",
"function_list",
"index_info",
"index_list",
"index_xinfo",
"page_count",
"max_page_count",
"page_size",
"schema_version",
"table_info",
"table_xinfo",
)
disallawed_sql_res = [
(
re.compile("pragma(?!_({}))".format("|".join(allowed_pragmas))),
"Statement may not contain PRAGMA",
)
]
def validate_sql_select(sql):