Fix: detect mutating keywords inside CTEs in read-only mode#292

Closed

tianzhou wants to merge 12 commits into

mainfrom

fix/issue-271-cte-readonly-bypass

Commits on Mar 28, 2026

Fix: detect mutating keywords inside CTEs in read-only mode

tianzhou
and
claude
committed
Fix: exclude REPLACE() string function from mutating keyword detection

tianzhou
and
claude
committed
Fix: scope mutating scan to WITH statements, add SELECT INTO detection

tianzhou
and
claude
committed
Fix: handle WITH...SELECT INTO, EXPLAIN ANALYZE with DML, REPLACE() in CTEs

tianzhou
and
claude
committed
Fix: validate EXPLAIN ANALYZE inner statement with full read-only logic

tianzhou
and
claude
committed
Fix: handle EXPLAIN ANALYZE VERBOSE in read-only check

tianzhou
and
claude
committed
Fix: make REPLACE detection dialect-aware (MySQL/MariaDB only)

tianzhou
and
claude
committed
Fix: reject standalone ANALYZE, handle EXPLAIN (ANALYZE false/off)

tianzhou
and
claude
committed
Fix: narrow MySQL REPLACE detection to REPLACE INTO statement form

tianzhou
and
claude
committed
Fix: add REPLACE INTO detection for SQLite in read-only mode

tianzhou
and
claude
committed
Refactor: simplify mutating pattern dispatch and avoid redundant work

tianzhou
and
claude
committed
Fix: detect REPLACE without INTO in MySQL/MariaDB/SQLite

tianzhou
and
claude
committed