Alex c8bb781604 fix: expand _WRITE_COMMANDS and block multi-statement semicolon injection ...

- Add missing write commands: UPSERT, LOAD, COPY, VACUUM, ANALYZE,
  ANALYSE, REINDEX, CLUSTER, REFRESH, COMMENT, SET, RESET
- _validate_query() now splits on ';' and validates each statement
  independently; multi-statement queries are rejected outright in
  read-only mode to prevent 'SELECT 1; DROP TABLE users' bypass
- Extract single-statement logic into _validate_statement() helper
- Add TestSemicolonInjection and TestExtendedWriteCommands test classes

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

2026-04-07 09:17:34 -07:00

..

cassettes

chore: restructure test env, cassettes, and conftest; fix flaky tests

2025-11-29 16:55:24 -05:00

crewai_platform_tools

fix: correct tool-calling content handling and schema serialization

2026-01-27 15:47:29 -05:00

rag

fix: ensure parameters in RagTool.add, add typing, tests (#3979)

2025-11-26 22:32:43 -08:00

__init__.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

arxiv_paper_tool_test.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

brave_search_tool_test.py

Introduce more Brave Search tools (#4446)

2026-03-10 01:38:54 -03:00

brightdata_serp_tool_test.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

brightdata_webunlocker_tool_test.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

couchbase_tool_test.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

exa_search_tool_test.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

files_compressor_tool_test.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

firecrawl_crawl_website_tool_test.py

chore: restructure test env, cassettes, and conftest; fix flaky tests

2025-11-29 16:55:24 -05:00

firecrawl_scrape_website_tool_test.py

chore: restructure test env, cassettes, and conftest; fix flaky tests

2025-11-29 16:55:24 -05:00

firecrawl_search_tool_test.py

chore: restructure test env, cassettes, and conftest; fix flaky tests

2025-11-29 16:55:24 -05:00

generate_crewai_automation_tool_test.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

merge_agent_handler_tool_test.py

feat: Add Merge Agent Handler tool (#3911)

2025-11-20 16:58:41 -08:00

parallel_search_tool_test.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

selenium_scraping_tool_test.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

serper_dev_tool_test.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

singlestore_search_tool_test.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

snowflake_search_tool_test.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

stagehand_tool_test.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

test_file_writer_tool.py

fix: prevent path traversal in FileWriterTool (#4895)

2026-03-19 20:11:45 +08:00

test_import_without_warnings.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

test_mongodb_vector_search_tool.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

test_nl2sql_security.py

fix: expand _WRITE_COMMANDS and block multi-statement semicolon injection

2026-04-07 09:17:34 -07:00

test_oxylabs_tools.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00

test_pdf_search_tool_config.py

fix: rag tool embeddings config

2025-11-24 16:51:28 -05:00

test_search_tools.py

chore: restructure test env, cassettes, and conftest; fix flaky tests

2025-11-29 16:55:24 -05:00

test_txt_search_tool_config.py

fix: rag tool embeddings config

2025-11-24 16:51:28 -05:00

tool_collection_test.py

Release/v1.0.0 (#3618)

2025-10-20 14:10:19 -07:00