sqlident

Overview ¶

Package sqlident validates SQL identifiers (table names) that refid's storage backends interpolate directly into raw SQL strings. Table names cannot be passed as bind parameters, so every backend must whitelist a caller-supplied name before formatting it into a query; sharing one validator (instead of one per backend) keeps both backends enforcing the identical rule and in lockstep if it's ever hardened.