Variable FIREWALL_RULESConst

Type Declaration

• ReadonlyDESTRUCTIVE: readonly [
      { pattern: RegExp; description: "DROP object" },
      { pattern: RegExp; description: "TRUNCATE table" },
      { pattern: RegExp; description: "DELETE without WHERE clause" },
      { pattern: RegExp; description: "ALTER TABLE DROP" },
      { pattern: RegExp; description: "ALTER TABLE RENAME" },
      { pattern: RegExp; description: "DROP index" },
      { pattern: RegExp; description: "DROP trigger" },
      { pattern: RegExp; description: "DROP sequence" },
  ]

• ReadonlySCHEMA_MODIFICATION: readonly [
      { pattern: RegExp; description: "CREATE table/database/schema" },
      { pattern: RegExp; description: "ADD column" },
      { pattern: RegExp; description: "MODIFY column" },
      { pattern: RegExp; description: "CHANGE column" },
      { pattern: RegExp; description: "ADD index" },
      { pattern: RegExp; description: "CREATE index" },
      { pattern: RegExp; description: "CREATE index" },
  ]

• ReadonlyPERMISSIONS: readonly [
      { pattern: RegExp; description: "GRANT permissions" },
      { pattern: RegExp; description: "REVOKE permissions" },
      { pattern: RegExp; description: "CREATE user" },
      { pattern: RegExp; description: "DROP user" },
      { pattern: RegExp; description: "ALTER user" },
      { pattern: RegExp; description: "SET password" },
  ]

• ReadonlyCODE_EXECUTION: readonly [
      { pattern: RegExp; description: "EXEC stored procedure" },
      { pattern: RegExp; description: "EXECUTE stored procedure" },
      { pattern: RegExp; description: "CALL procedure/function" },
      { pattern: RegExp; description: "xp_cmdshell (SQL Server)" },
      { pattern: RegExp; description: "sp_executesql (SQL Server)" },
      { pattern: RegExp; description: "CREATE function/procedure" },
      { pattern: RegExp; description: "DROP function/procedure" },
  ]

• ReadonlyFILE_OPERATIONS: readonly [
      { pattern: RegExp; description: "LOAD_FILE() - read file" },
      { pattern: RegExp; description: "INTO OUTFILE - write file" },
      { pattern: RegExp; description: "INTO DUMPFILE - write binary file" },
      { pattern: RegExp; description: "Path traversal attempt" },
      { pattern: RegExp; description: "Access /etc/passwd" },
      { pattern: RegExp; description: "Access Windows system32" },
  ]

• ReadonlyINFORMATION_GATHERING: readonly [
      { pattern: RegExp; description: "SHOW databases/tables/columns" },
      { pattern: RegExp; description: "DESCRIBE table" },
      { pattern: RegExp; description: "EXPLAIN query" },
      { pattern: RegExp; description: "Get database version" },
      { pattern: RegExp; description: "Get current user" },
      { pattern: RegExp; description: "Get current user" },
      { pattern: RegExp; description: "Get data directory" },
      { pattern: RegExp; description: "Access information_schema" },
  ]

• ReadonlyTRANSACTION_CONTROL: readonly [
      { pattern: RegExp; description: "BEGIN transaction" },
      { pattern: RegExp; description: "START TRANSACTION" },
      { pattern: RegExp; description: "COMMIT transaction" },
      { pattern: RegExp; description: "ROLLBACK transaction" },
      { pattern: RegExp; description: "SET TRANSACTION ISOLATION" },
  ]

• ReadonlyBULK_OPERATIONS: readonly [
      { pattern: RegExp; description: "BULK INSERT" },
      { pattern: RegExp; description: "Bulk insert with wildcard" },
  ]

• ReadonlyREMOTE_OPERATIONS: readonly [
      { pattern: RegExp; description: "Cross-database query" },
      { pattern: RegExp; description: "Remote execution (Oracle)" },
      { pattern: RegExp; description: "OPENQUERY - linked server" },
      { pattern: RegExp; description: "OPENDATASOURCE" },
  ]

• ReadonlyCRYPTO_OPERATIONS: readonly [
      { pattern: RegExp; description: "CREATE asymmetric key" },
      { pattern: RegExp; description: "CREATE symmetric key" },
      { pattern: RegExp; description: "CREATE certificate" },
  ]

• ReadonlyBACKUP_OPERATIONS: readonly [
      { pattern: RegExp; description: "BACKUP database/log" },
      { pattern: RegExp; description: "RESTORE database/log" },
      { pattern: RegExp; description: "mysqldump command" },
      { pattern: RegExp; description: "pg_dump command" },
  ]