41b8568d5c
Add Pest tests for SqlQueryValidator covering: - Allowed SELECT statements with WHERE, ORDER BY, LIMIT - Blocked data modification (INSERT, UPDATE, DELETE, TRUNCATE) - Blocked schema changes (DROP, ALTER, CREATE, RENAME) - Blocked permissions/admin (GRANT, REVOKE, FLUSH, KILL, SET) - Blocked execution (EXECUTE, PREPARE, CALL, DEALLOCATE) - Blocked file operations (INTO OUTFILE/DUMPFILE, LOAD_FILE/DATA) - SQL injection prevention: UNION attacks, stacked queries, time-based (SLEEP/BENCHMARK), encoding (hex/CHAR), subqueries, system table access, comment obfuscation - Query structure validation and whitelist configuration - Exception details and edge cases Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
41 lines
1.2 KiB
PHP
41 lines
1.2 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Pest Configuration
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Configure Pest testing framework for the core-mcp package.
|
|
| This file binds test traits to test cases and provides helper functions.
|
|
|
|
|
*/
|
|
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Tests\TestCase;
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Test Case
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| The closure passed to the "uses()" method binds an abstract test case
|
|
| to all Feature and Unit tests. The TestCase class provides a bridge
|
|
| between Laravel's testing utilities and Pest's expressive syntax.
|
|
|
|
|
*/
|
|
|
|
uses(TestCase::class)->in('Feature', 'Unit');
|
|
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Database Refresh
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Apply RefreshDatabase to Feature tests that need a clean database state.
|
|
| Unit tests typically don't require database access.
|
|
|
|
|
*/
|
|
|
|
uses(RefreshDatabase::class)->in('Feature');
|