Stufe 4c (#764): Bezeichner auf Englisch - Typen, Methoden, Felder, Parameter, Locals, Testnamen
Mit Roslyn umbenannt (Verweise folgen, Zeichenketten bleiben unberuehrt). Nicht umbenannt, weil gespeichert oder ueber die API gebunden (Stufe 4e): Properties, Record-Parameter, Enum-Member sowie die Parameter der Endpunkt-Handler (Routen-/Query-Bindung ueber den Namen). Die JSON-Felder anonymer Objekte bleiben ausdruecklich benannt (JsonFilter: pfad). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
co-authored by
Claude Opus 5.5
parent
837a634a22
commit
77062facc9
@@ -30,7 +30,7 @@ public sealed class SqlGuardTests
|
||||
[InlineData("DESCRIBE prices", SqlOperation.Read)]
|
||||
[InlineData("DESC prices", SqlOperation.Read)]
|
||||
[InlineData("SHOW COLUMNS FROM prices", SqlOperation.Read)]
|
||||
public void IF_NOT_EXISTS_und_Strukturabfragen_nennen_die_richtige_Tabelle(string sql, SqlOperation operation)
|
||||
public void IF_NOT_EXISTS_and_structure_queries_name_the_right_table(string sql, SqlOperation operation)
|
||||
{
|
||||
var result = Inspect(sql);
|
||||
|
||||
@@ -43,7 +43,7 @@ public sealed class SqlGuardTests
|
||||
[InlineData("CREATE TABLE IF NOT EXISTS users (id INT)")]
|
||||
[InlineData("DROP TABLE IF EXISTS users")]
|
||||
[InlineData("DESCRIBE users")]
|
||||
public void IF_EXISTS_und_DESCRIBE_oeffnen_keine_fremde_Tabelle(string sql)
|
||||
public void IF_EXISTS_and_DESCRIBE_open_no_foreign_table(string sql)
|
||||
=> Inspect(sql).IsValid.ShouldBeFalse();
|
||||
|
||||
[Theory]
|
||||
@@ -52,7 +52,7 @@ public sealed class SqlGuardTests
|
||||
[InlineData("DROP TABLE users -- prices")]
|
||||
[InlineData("UPDATE users SET admin=1 -- prices")]
|
||||
[InlineData("SELECT * FROM users # prices")]
|
||||
public void Kommentare_koennen_keine_erlaubte_Tabelle_vortaeuschen(string sql)
|
||||
public void Comments_cannot_fake_an_allowed_table(string sql)
|
||||
{
|
||||
var result = Inspect(sql);
|
||||
|
||||
@@ -63,7 +63,7 @@ public sealed class SqlGuardTests
|
||||
[InlineData("SELECT * FROM users WHERE note = 'prices'")]
|
||||
[InlineData("INSERT INTO users (name) VALUES ('prices')")]
|
||||
[InlineData("SELECT * FROM users WHERE a = \"prices\"")]
|
||||
public void String_Literale_koennen_keine_erlaubte_Tabelle_vortaeuschen(string sql)
|
||||
public void String_literals_cannot_fake_an_allowed_table(string sql)
|
||||
{
|
||||
Inspect(sql).IsValid.ShouldBeFalse();
|
||||
}
|
||||
@@ -72,7 +72,7 @@ public sealed class SqlGuardTests
|
||||
[InlineData("SELECT * FROM prices; DROP TABLE users")]
|
||||
[InlineData("SELECT * FROM prices; DELETE FROM users")]
|
||||
[InlineData("SELECT 1; SELECT 2")]
|
||||
public void Mehrere_Statements_werden_abgelehnt(string sql)
|
||||
public void Multiple_statements_are_rejected(string sql)
|
||||
{
|
||||
var result = Inspect(sql);
|
||||
|
||||
@@ -84,7 +84,7 @@ public sealed class SqlGuardTests
|
||||
[InlineData("SELECT * FROM prices JOIN users ON users.id = prices.uid")]
|
||||
[InlineData("SELECT * FROM prices, users")]
|
||||
[InlineData("INSERT INTO users SELECT * FROM prices")]
|
||||
public void Ein_einziger_unerlaubter_Join_reicht_zur_Ablehnung(string sql)
|
||||
public void A_single_disallowed_join_is_enough_for_rejection(string sql)
|
||||
{
|
||||
// Crucial: EVERY referenced table must be allowed, not just any one.
|
||||
var result = Inspect(sql);
|
||||
@@ -94,7 +94,7 @@ public sealed class SqlGuardTests
|
||||
}
|
||||
|
||||
[Fact]
|
||||
public void Ohne_Whitelist_wird_nichts_durchgelassen()
|
||||
public void Without_whitelist_nothing_is_let_through()
|
||||
{
|
||||
SqlGuard.Inspect("SELECT * FROM prices", []).IsValid.ShouldBeFalse();
|
||||
}
|
||||
@@ -103,7 +103,7 @@ public sealed class SqlGuardTests
|
||||
[InlineData(null)]
|
||||
[InlineData("")]
|
||||
[InlineData(" ")]
|
||||
public void Leere_Statements_werden_abgelehnt(string? sql)
|
||||
public void Empty_statements_are_rejected(string? sql)
|
||||
{
|
||||
SqlGuard.Inspect(sql, Allowed).IsValid.ShouldBeFalse();
|
||||
}
|
||||
@@ -118,7 +118,7 @@ public sealed class SqlGuardTests
|
||||
[InlineData("SELECT * FROM prices JOIN signals ON signals.ticker = prices.ticker")]
|
||||
[InlineData("select * from PRICES")]
|
||||
[InlineData("SELECT * FROM prices;")]
|
||||
public void Erlaubte_Leseabfragen_gehen_durch(string sql)
|
||||
public void Allowed_read_queries_go_through(string sql)
|
||||
{
|
||||
var result = Inspect(sql);
|
||||
|
||||
@@ -130,7 +130,7 @@ public sealed class SqlGuardTests
|
||||
[InlineData("SELECT * FROM prices WHERE note = 'update'")]
|
||||
[InlineData("SELECT * FROM prices WHERE kommentar = 'bitte delete beachten'")]
|
||||
[InlineData("SELECT * FROM prices WHERE aktion = 'drop'")]
|
||||
public void Harmlose_Schluesselwoerter_in_Werten_gelten_nicht_als_Schreibzugriff(string sql)
|
||||
public void Harmless_keywords_in_values_do_not_count_as_write_access(string sql)
|
||||
{
|
||||
// The old substring test wrongly classified these queries as write or
|
||||
// structure access and blocked them for read-only agents.
|
||||
@@ -147,7 +147,7 @@ public sealed class SqlGuardTests
|
||||
[InlineData("DROP TABLE prices", SqlOperation.Schema)]
|
||||
[InlineData("ALTER TABLE prices ADD COLUMN x INT", SqlOperation.Schema)]
|
||||
[InlineData("TRUNCATE TABLE prices", SqlOperation.Schema)]
|
||||
public void Die_Operation_wird_am_ersten_Schluesselwort_bestimmt(string sql, SqlOperation expected)
|
||||
public void The_operation_is_determined_by_the_first_keyword(string sql, SqlOperation expected)
|
||||
{
|
||||
var result = Inspect(sql);
|
||||
|
||||
@@ -156,7 +156,7 @@ public sealed class SqlGuardTests
|
||||
}
|
||||
|
||||
[Fact]
|
||||
public void Schema_qualifizierte_Namen_werden_erkannt()
|
||||
public void Schema_qualified_names_are_recognised()
|
||||
{
|
||||
var result = Inspect("SELECT * FROM crypto.prices WHERE id = 1");
|
||||
|
||||
@@ -164,7 +164,7 @@ public sealed class SqlGuardTests
|
||||
}
|
||||
|
||||
[Fact]
|
||||
public void Der_Fehlertext_nennt_die_abgelehnte_Tabelle_und_die_erlaubten()
|
||||
public void The_error_text_names_the_rejected_table_and_the_allowed_ones()
|
||||
{
|
||||
var result = Inspect("SELECT * FROM geheim");
|
||||
|
||||
@@ -173,7 +173,7 @@ public sealed class SqlGuardTests
|
||||
}
|
||||
|
||||
[Fact]
|
||||
public void Escaptes_Apostroph_im_Literal_bricht_die_Erkennung_nicht()
|
||||
public void Escaped_apostrophe_in_the_literal_does_not_break_detection()
|
||||
{
|
||||
var result = Inspect("SELECT * FROM prices WHERE name = 'O''Brien'");
|
||||
|
||||
|
||||
Reference in New Issue
Block a user