Replace the hardcoded validTableNames allowlist with a regexp that only allows [a-z0-9_] characters. This prevents SQL injection without requiring maintenance of a separate allowlist when new tables are added. Addresses review feedback from @sneak on PR #32. |
||
|---|---|---|
| .. | ||
| helpers.go | ||
| info.go | ||
| integration_test.go | ||
| prune.go | ||
| restore.go | ||
| snapshot.go | ||
| vaultik.go | ||
| verify.go | ||