INNER CODE UNIT · C#

SqlIdentifierTests

VictorTzeng/Zxw.Framework.NetCore · Zxw.Framework.UnitTest/SqlIdentifierTests.cs:8

    public class SqlIdentifierTests
    {
        [TestMethod]
        public void EnsureSafe_AllowsSimpleAndSchemaQualifiedNames()
        {
            SqlIdentifier.EnsureSafe("SysMenu", "viewName");
            SqlIdentifier.EnsureSafe("dbo.SysMenu", "viewName");
        }

        [TestMethod]
        public void EnsureSafe_RejectsInjectionPayloads()
        {
            Assert.ThrowsException<ArgumentException>(() =>
                SqlIdentifier.EnsureSafe("SysMenu; DROP TABLE Users--", "viewName"));
            Assert.ThrowsException<ArgumentException>(() =>
                SqlIdentifier.EnsureSafe("SysMenu WHERE 1=1", "viewName"));
            Assert.ThrowsException<ArgumentException>(() =>
                SqlIdentifier.EnsureSafe(null, "viewName"));

View source record →