Files
ewoooc/utils/validators.py
ooo 17cb012be7
All checks were successful
CD Pipeline / deploy (push) Successful in 1m6s
refactor(p1-01c): 整併 utils/security 與 utils/validators 重複實作
發現 utils/validators.py 已存在且完整重複 utils/security.py 的 9 個函數。
不收拾的話會繼續腐爛 — 立刻整併為單一權威來源。

變更:
- utils/security.py 增加 safe_read_sql(取自 validators.py 較完整版本,含 limit + params)
- utils/security.py ALLOWED_TABLES 取兩份聯集(補上 monthly_summary_analysis,
  realtime_sales_daily),避免破壞既有呼叫者
- utils/validators.py 改為純 re-export shim(保 from utils.validators import 不破)
- app.py 移除原 safe_read_sql 重複定義(35 行),改 import utils.security

routes/import_routes.py 不變(它 from utils.validators 走得到 re-export,等下輪統一)。

行數變化: app.py 7,187 → 7,151 (-36)
2026-04-28 15:48:41 +08:00

20 lines
494 B
Python
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
"""DEPRECATED — 完整實作已搬至 utils/security.py。
此檔案僅保留為 backward-compat re-export避免破壞既有 import。
新程式碼請直接 `from utils.security import ...`。
"""
# ruff: noqa: F401, F403
from utils.security import (
ALLOWED_TABLES,
ALLOWED_UPLOAD_EXTENSIONS,
ALLOWED_MIME_TYPES,
validate_table_name,
validate_column_names,
safe_read_sql,
safe_join,
secure_filename_unicode,
allowed_file,
validate_upload_file,
)