Merge pull request #2568 from taozhi8833998/feat-show-white-list-check

feat: add show stmt whitelist check in mysql

Author: taozhi8833998

pegjs/mariadb.pegjs

@@ -1589,6 +1589,7 @@ show_stmt
     }
   }
   / KW_SHOW __ KW_TABLES {
+    tableList.add(`show::null::null`)
     return {
       tableList: Array.from(tableList),
       columnList: columnListTableAlias(columnList),

pegjs/mysql.pegjs

@@ -1871,6 +1871,7 @@ show_stmt
     }
   }
   / KW_SHOW __ KW_TABLES {
+    tableList.add(`show::null::null`)
     return {
       tableList: Array.from(tableList),
       columnList: columnListTableAlias(columnList),

test/select.spec.js

@@ -234,7 +234,7 @@ describe('select', () => {
               type: 'binary_expr',
               operator: '&&',
               left: {
-                  collate: null, 
+                  collate: null,
                   type: 'column_ref',
                   table: 't',
                   column: 'cd'
@@ -1184,10 +1184,14 @@ describe('select', () => {
         expect(result).to.be.eql(undefined)
       })
       it('should fail for simple check', () => {
-        const sql = 'SELECT * FROM b'
-        const whiteList = ['select::(.*)::a']
-        const fun = parser.whiteListCheck.bind(parser, sql, whiteList)
+        let sql = 'SELECT * FROM b'
+        let whiteList = ['select::(.*)::a']
+        let fun = parser.whiteListCheck.bind(parser, sql, whiteList)
         expect(fun).to.throw(`authority = 'select::null::b' is required in table whiteList to execute SQL = '${sql}'`)
+        sql = 'SHOW TABLES'
+        whiteList = ['(select)::(.*)::(.*)']
+        fun = parser.whiteListCheck.bind(parser, sql, whiteList)
+        expect(fun).to.throw(`authority = 'show::null::null' is required in table whiteList to execute SQL = '${sql}'`)
       })
       it('should fail for as column reserved word check', () => {
         const sql = 'SELECT id as delete FROM b'