Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[ bug ]脱敏字段联合查询失效 #395

Closed
keithyzk opened this issue Aug 23, 2019 · 2 comments
Closed

[ bug ]脱敏字段联合查询失效 #395

keithyzk opened this issue Aug 23, 2019 · 2 comments
Assignees
Labels
bug Something isn't working enhancement New feature or request

Comments

@keithyzk
Copy link

重现步骤

select email from  activity_email_all_in_one ;

image

select id from test union select email from  activity_email_all_in_one ;

image

[2019-08-23 14:30:09,382][MainThread:139779947976512][task_id:default][tasks.py:31][DEBUG]- 删除task:query-1566541808.8708951
DEBUG:default:删除task:query-1566541808.8708951
[2019-08-23 14:30:55,345][MainThread:139779947976512][task_id:default][tasks.py:31][DEBUG]- 删除task:query-1566541854.9246702
DEBUG:default:删除task:query-1566541854.9246702

-->

版本信息

应用版本/分支:
master
部署方式:Docker

@hhyo hhyo added the bug Something isn't working label Aug 24, 2019
@hhyo hhyo self-assigned this Aug 24, 2019
@hhyo hhyo added the enhancement New feature or request label Aug 24, 2019
@hhyo
Copy link
Owner

hhyo commented Aug 24, 2019

感谢反馈,经验证Inception不支持union语法的解析,解析出的语法树只包含第一条语句信息,导致未命中脱敏规则

现在因为没有完全替代Inception解析,无法兼容此语法,故在脱敏方法中增加了 union&union all 关键字判断,遇到联合查询会返回 不支持该查询语句脱敏! 如果系统设置开启查询校验,将会直接驳回,避免数据泄露。

@hhyo
Copy link
Owner

hhyo commented Aug 24, 2019

相关问题将会在 #145 中持续跟进

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

2 participants