Merge pull request #2304 from koic/accept_nested_functions_in_dangerous_query_methods

yahonda · web-flow · commit 268815f3bb79 · 2022-07-21T14:49:01.000+09:00
Accept nested functions in Dangerous Query Methods
diff --git a/lib/active_record/connection_adapters/oracle_enhanced/quoting.rb b/lib/active_record/connection_adapters/oracle_enhanced/quoting.rb
@@ -142,7 +142,7 @@ def column_name_with_order_matcher
           (
             (?:
               # "table_name"."column_name" | function(one or no argument)
-              ((?:\w+\.|"\w+"\.)?(?:\w+|"\w+")) | \w+\((?:|\g<2>)\)
+              ((?:\w+\.|"\w+"\.)?(?:\w+|"\w+") | \w+\((?:|\g<2>)\))
             )
             (?:(?:\s+AS)?\s+(?:\w+|"\w+"))?
           )
@@ -155,7 +155,7 @@ def column_name_with_order_matcher
           (
             (?:
               # "table_name"."column_name" | function(one or no argument)
-              ((?:\w+\.|"\w+"\.)?(?:\w+|"\w+")) | \w+\((?:|\g<2>)\)
+              ((?:\w+\.|"\w+"\.)?(?:\w+|"\w+") | \w+\((?:|\g<2>)\))
             )
             (?:\s+ASC|\s+DESC)?
             (?:\s+NULLS\s+(?:FIRST|LAST))?

Original file line number	Diff line number	Diff line change
`@@ -142,7 +142,7 @@ def column_name_with_order_matcher`
`142`	`142`	`(`
`143`	`143`	`(?:`
`144`	`144`	`# "table_name"."column_name" \| function(one or no argument)`
`145`		`- ((?:\w+\.\|"\w+"\.)?(?:\w+\|"\w+")) \| \w+\((?:\|\g<2>)\)`
	`145`	`+ ((?:\w+\.\|"\w+"\.)?(?:\w+\|"\w+") \| \w+\((?:\|\g<2>)\))`
`146`	`146`	`)`
`147`	`147`	`(?:(?:\s+AS)?\s+(?:\w+\|"\w+"))?`
`148`	`148`	`)`
`@@ -155,7 +155,7 @@ def column_name_with_order_matcher`
`155`	`155`	`(`
`156`	`156`	`(?:`
`157`	`157`	`# "table_name"."column_name" \| function(one or no argument)`
`158`		`- ((?:\w+\.\|"\w+"\.)?(?:\w+\|"\w+")) \| \w+\((?:\|\g<2>)\)`
	`158`	`+ ((?:\w+\.\|"\w+"\.)?(?:\w+\|"\w+") \| \w+\((?:\|\g<2>)\))`
`159`	`159`	`)`
`160`	`160`	`(?:\s+ASC\|\s+DESC)?`
`161`	`161`	`(?:\s+NULLS\s+(?:FIRST\|LAST))?`