Mian Shahzad RazaandClaude Opus 5 e63d738a1a docs(sql): state the mode-dependent refusal rule instead of implying an absolute ...

A confirmation review pointed out that "unterminated strings, comments and
identifiers are all hard refusals" reads more absolutely than the code behaves.
A tokenizer error does always abort THAT reading, but the policy treats
unterminated_quote as mode-dependent: a statement whose quoting only balances
under one sql_mode is a syntax error under the other, so that reading is not one
the server could have executed and is skipped, provided another reading parses
and every reading that parses is safe. Every other failure is mode-independent
and refuses outright.

The behaviour is unchanged and already pinned by two tests; only the docblock
was overstating it.

Co-Authored-By: Claude Opus 5 <[email protected]>

2026-08-18 22:58:25 +05:00

..

class-sql-lexer.php

docs(sql): state the mode-dependent refusal rule instead of implying an absolute

2026-08-18 22:58:25 +05:00

class-sql-policy.php

security(3.13.0): rebuild the read-only SQL guard on a real tokenizer

2026-08-18 07:22:11 +05:00