wall filter

src/test/java/com/alibaba/druid/bvt/filter/wall/OracleWallPermitTableTest.java

@@ -18,6 +18,8 @@ public class OracleWallPermitTableTest extends TestCase {
         Assert.assertFalse(WallUtils.isValidateOracle("select * from tab"));
         Assert.assertFalse(WallUtils.isValidateOracle("select * from SYS.TAB"));
         Assert.assertFalse(WallUtils.isValidateOracle("select * from SYS.\"TAB\""));
+        
+        Assert.assertFalse(WallUtils.isValidateOracle("select * from all_users"));
     }
     
     public void test_permitTable_subquery() throws Exception {

src/test/java/com/alibaba/druid/bvt/filter/wall/WallDropTest.java

@@ -0,0 +1,23 @@
+package com.alibaba.druid.bvt.filter.wall;
+
+import junit.framework.TestCase;
+
+import org.junit.Assert;
+
+import com.alibaba.druid.filter.wall.WallUtils;
+
+/**
+ * 这个场景，被攻击者用于测试当前SQL拥有多少字段
+ * @author wenshao
+ *
+ */
+public class WallDropTest extends TestCase {
+
+    public void testMySql() throws Exception {
+        Assert.assertFalse(WallUtils.isValidateMySql("DROP TABLE T1"));
+    }
+    
+    public void testOracle() throws Exception {
+        Assert.assertFalse(WallUtils.isValidateOracle("DROP TABLE T1"));
+    }
+}

src/test/java/com/alibaba/druid/sql/OnlineOracleTest3.java

@@ -30,10 +30,11 @@ public class OnlineOracleTest3 extends TestCase {
         dataSource.setMaxActive(50);
         dataSource.setPoolPreparedStatements(true);
         dataSource.setMaxOpenPreparedStatements(100);
+//        dataSource.setFilters("wall");
     }
 
     public void test_connect() throws Exception {
-        executeQuery("select utl_inaddr.get_host_address from DUAL");
+        executeQuery("select * from all_users");
     }
 
     public void executeQuery(String sql) throws SQLException {