From 919bc2e9973bf57b2e2fe09ed0456fb0d07bdae9 Mon Sep 17 00:00:00 2001 From: Vika Date: Mon, 25 Mar 2024 03:33:08 +0300 Subject: Prototype sanitizer for SQL This might allow me to use SQL syntax in Kittybox's private search interfaces, allowing for queries of incredible specificity while not allowing to query private data or inject arbitrary SQL. --- Cargo.toml | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'Cargo.toml') diff --git a/Cargo.toml b/Cargo.toml index 809e68b..f32ce6d 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -155,4 +155,8 @@ version = "1.0.35" [dependencies.sqlx] version = "^0.7" features = ["uuid", "chrono", "json", "postgres", "runtime-tokio"] +optional = true +[dependencies.sqlparser] +version = "0.44.0" +features = ["serde", "serde_json"] optional = true \ No newline at end of file -- cgit 1.4.1