BEGIN; CREATE EXTENSION IF NOT EXISTS anon CASCADE; NOTICE: installing required extension "pgcrypto" -- Sample Table CREATE TABLE a ( i SERIAL, d TIMESTAMP, x INTEGER, t TEXT ); -- -- random_phone -- --returns TRUE SELECT anon.random_phone('11; SELECT 0;') LIKE '11; SELECT 0;%'; ?column? ---------- t (1 row) -- -- add_noise_on_numeric_column -- SAVEPOINT noise_1; SELECT anon.add_noise_on_numeric_column('a; SELECT 1','x',0.5); ERROR: invalid name syntax LINE 1: SELECT anon.add_noise_on_numeric_column('a; SELECT 1','x',0.... ^ ROLLBACK TO noise_1; SAVEPOINT noise_2; SELECT anon.add_noise_on_numeric_column('a','x; SELECT 1',0.5); ERROR: Column "x; SELECT 1" does not exist in table "a". CONTEXT: PL/pgSQL function anon.add_noise_on_numeric_column(regclass,text,double precision) line 6 at RAISE ROLLBACK TO noise_2; -- -- add_noise_on_datetime_column -- SAVEPOINT noise_3; SELECT anon.add_noise_on_datetime_column('a; SELECT 1','d','2 days'); ERROR: invalid name syntax LINE 1: SELECT anon.add_noise_on_datetime_column('a; SELECT 1','d','... ^ ROLLBACK TO noise_3; SAVEPOINT noise_4; SELECT anon.add_noise_on_datetime_column('a','d; SELECT 1','2 days'); ERROR: Column "d; SELECT 1" does not exist in table "a". CONTEXT: PL/pgSQL function anon.add_noise_on_datetime_column(regclass,text,interval) line 5 at RAISE ROLLBACK TO noise_4; SAVEPOINT noise_5; SELECT anon.add_noise_on_datetime_column('a','d','2 days; SELECT 1'); ERROR: invalid input syntax for type interval: "2 days; SELECT 1" LINE 1: SELECT anon.add_noise_on_datetime_column('a','d','2 days; SE... ^ ROLLBACK TO noise_5; -- -- shuffle_column -- SAVEPOINT shuffle_1; SELECT anon.shuffle_column('a; SELECT 1','x','i'); ERROR: invalid name syntax LINE 1: SELECT anon.shuffle_column('a; SELECT 1','x','i'); ^ ROLLBACK TO shuffle_1; SAVEPOINT shuffle_2; SELECT anon.shuffle_column('a','x; SELECT 1','i'); ERROR: Column "x; SELECT 1" does not exist in table "a". CONTEXT: PL/pgSQL function anon.shuffle_column(regclass,name,name) line 4 at RAISE ROLLBACK TO shuffle_2; SAVEPOINT shuffle_3; SELECT anon.shuffle_column('a','x','i; SELECT 1'); ERROR: Column "i; SELECT 1" does not exist in table "a". CONTEXT: PL/pgSQL function anon.shuffle_column(regclass,name,name) line 12 at RAISE ROLLBACK TO shuffle_3; -- -- load -- -- returns a WARNING and FALSE SELECT anon.load('base/''; CREATE TABLE inject_via_load(i int);--') IS FALSE; NOTICE: Data file 'base/'; CREATE TABLE inject_via_load(i int);--/identifiers_category.csv' is not present. Skipping. NOTICE: Data file 'base/'; CREATE TABLE inject_via_load(i int);--/identifier_fr_FR.csv' is not present. Skipping. NOTICE: Data file 'base/'; CREATE TABLE inject_via_load(i int);--/identifier_en_US.csv' is not present. Skipping. NOTICE: Data file 'base/'; CREATE TABLE inject_via_load(i int);--/address.csv' is not present. Skipping. NOTICE: Data file 'base/'; CREATE TABLE inject_via_load(i int);--/city.csv' is not present. Skipping. NOTICE: Data file 'base/'; CREATE TABLE inject_via_load(i int);--/company.csv' is not present. Skipping. NOTICE: Data file 'base/'; CREATE TABLE inject_via_load(i int);--/country.csv' is not present. Skipping. NOTICE: Data file 'base/'; CREATE TABLE inject_via_load(i int);--/email.csv' is not present. Skipping. NOTICE: Data file 'base/'; CREATE TABLE inject_via_load(i int);--/first_name.csv' is not present. Skipping. NOTICE: Data file 'base/'; CREATE TABLE inject_via_load(i int);--/iban.csv' is not present. Skipping. NOTICE: Data file 'base/'; CREATE TABLE inject_via_load(i int);--/last_name.csv' is not present. Skipping. NOTICE: Data file 'base/'; CREATE TABLE inject_via_load(i int);--/postcode.csv' is not present. Skipping. NOTICE: Data file 'base/'; CREATE TABLE inject_via_load(i int);--/siret.csv' is not present. Skipping. NOTICE: Data file 'base/'; CREATE TABLE inject_via_load(i int);--/lorem_ipsum.csv' is not present. Skipping. ?column? ---------- t (1 row) SELECT COUNT(*) = 0 FROM pg_tables WHERE tablename='inject_via_load'; ?column? ---------- t (1 row) -- -- Dynamic Masking -- SET anon.maskschema TO 'foo; CREATE TABLE inject_via_guc(i int);--'; SELECT anon.start_dynamic_masking(); start_dynamic_masking ----------------------- t (1 row) SELECT COUNT(*) = 0 FROM pg_tables WHERE tablename='inject_via_guc'; ?column? ---------- t (1 row) -- -- Masking Rule Syntax -- SECURITY LABEL FOR anon ON COLUMN a.t IS 'MASKED WITH VALUE $$foo; CREATE TABLE inject_via_rule(i int);--$$'; SELECT COUNT(*) = 0 FROM pg_tables WHERE tablename='inject_via_rule'; ?column? ---------- t (1 row) -- CLEAN UP DROP EXTENSION anon CASCADE; ROLLBACK;