Hein f54b707040 feat(pgsql): add WhereGroup and a podman/docker hardening test ...

- PgSQLSelectQuery implements common.WhereGrouper so x-custom-sql-or
  is grouped with the client's own conditions on the pgx adapter too.
- Add a container test (opt-in via RESOLVESPEC_TEST_CONTAINERS=1) that
  starts PostgreSQL with podman or docker and checks the hardening
  against a real database: parenthesis escape, pg_sleep, catalog
  subquery, stacked statements, x-custom-sql-or grouping and the
  legacy behaviour when hardening is switched off.

2026-10-01 14:41:46 +02:00

..

adapters

feat(pgsql): add WhereGroup and a podman/docker hardening test

2026-10-01 14:41:46 +02:00

cors.go

fix(common): harden CORS, sort, raw-SQL WHERE and x-custom-sql-or

2026-10-01 13:46:01 +02:00

handler_example.go

More common handler interface

2025-12-02 15:45:24 +02:00

handler_utils_test.go

fix(db): convert slices to PostgreSQL array literals in queries

2026-05-07 14:33:35 +02:00

handler_utils.go

fix(reflection): replace reflect.Ptr with reflect.Pointer

2026-06-22 16:40:07 +02:00

hardening_test.go

fix(common): harden CORS, sort, raw-SQL WHERE and x-custom-sql-or

2026-10-01 13:46:01 +02:00

hardening.go

fix(common): harden CORS, sort, raw-SQL WHERE and x-custom-sql-or

2026-10-01 13:46:01 +02:00

interfaces.go

fix(common): harden CORS, sort, raw-SQL WHERE and x-custom-sql-or

2026-10-01 13:46:01 +02:00

json_column_test.go

feat: add JSON/JSONB sub-field select, filter and sort

2026-09-07 17:05:52 +02:00

json_column.go

chore(common): satisfy linter on json_column.go (named results, De Morgan)

2026-09-07 17:07:22 +02:00

json_condition_test.go

fix(json-columns): skip JSON select columns with no model scan target

2026-09-28 12:30:56 +02:00

json_condition.go

fix(json-columns): skip JSON select columns with no model scan target

2026-09-28 12:30:56 +02:00

recursive_crud_test.go

test(handler): add tests for valid nested request verbs

2026-06-08 09:06:29 +02:00

recursive_crud.go

fix(reflection): replace reflect.Ptr with reflect.Pointer

2026-06-22 16:40:07 +02:00

spatial_helpers_test.go

feat(spectypes): add support for PostGIS and pgvector types

2026-08-29 21:27:42 +02:00

spatial_helpers.go

feat(spectypes): add support for PostGIS and pgvector types

2026-08-29 21:27:42 +02:00

sql_helpers_tablename_test.go

feat(tests): 🎉 More test for preload fixes.

2026-01-30 10:09:59 +02:00

sql_helpers_test.go

fix(common): harden CORS, sort, raw-SQL WHERE and x-custom-sql-or

2026-10-01 13:46:01 +02:00

sql_helpers.go

fix(common): harden CORS, sort, raw-SQL WHERE and x-custom-sql-or

2026-10-01 13:46:01 +02:00

TRANSACTIONS.md

fix: fire resolvespec AfterRead/AfterCreate/AfterDelete, key restheadspec total cache by record id

2026-09-30 23:40:32 +02:00

tx_guard_test.go

feat(resolvemcp): replace per-model tools with fixed meta tools, guarded filter writes and a function registry

2026-10-01 13:40:00 +02:00

txhook.go

feat(hooks): add OnTxBegin and runInTx for resolvespec and restheadspec

2026-09-30 22:40:06 +02:00

types_test.go

test(types): add test for ResolveSortColumns with descending order

2026-07-29 10:15:52 +02:00

types.go

feat(spectypes): add support for PostGIS and pgvector types

2026-08-29 21:27:42 +02:00

update_merge_test.go

feat(update): allow clearing values with "" and null on update

2026-09-30 17:03:42 +02:00

update_merge.go

feat(update): allow clearing values with "" and null on update

2026-09-30 17:03:42 +02:00

validation_json_test.go

feat: add JSON/JSONB sub-field select, filter and sort

2026-09-07 17:05:52 +02:00

validation_test.go

fix(common): harden CORS, sort, raw-SQL WHERE and x-custom-sql-or

2026-10-01 13:46:01 +02:00

validation.go

fix(common): harden CORS, sort, raw-SQL WHERE and x-custom-sql-or

2026-10-01 13:46:01 +02:00