feat: structure for sql table name validation

added dictionary to be used for better table name validation. This will help resolve bandit issues in intel#3965. Signed-off-by: Meet Soni <[email protected]>
inosmeet · Apr 10, 2024 · f85cd84 · f85cd84
1 parent 8a7a66b
commit f85cd84
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/cve_bin_tool/cvedb.py b/cve_bin_tool/cvedb.py
@@ -115,6 +115,14 @@ class CVEDB:
         """,
     }
 
+    EMPTY_SELECT_QUERIES = {
+        "cve_severity": "SELECT * FROM cve_severity WHERE 1=0",
+        "cve_range": "SELECT * FROM cve_range WHERE 1=0",
+        "cve_exploited": "SELECT * FROM cve_exploited WHERE 1=0",
+        "cve_metrics": "SELECT * FROM cve_metrics WHERE 1=0",
+        "metrics": "SELECT * FROM metrics WHERE 1=0",
+    }
+
     INSERT_QUERIES = {
         "insert_severity": """
        INSERT or REPLACE INTO cve_severity(