Support nullability checks on SQL Views about safeql HOT 2 OPEN

TL;DR - SafeQL (currently) doesn't support nullability checks for SQL views.

SafeQL's approach is "everything is nullable until proven otherwise" (for safety reasons). It infers whether a target result (e.g., selected column) is nullable or not, by first analyzing what it is. If it's a computation, it's not null for sure. If it's a table column, it's not null as long as that table column is NOT NULL as well, and so on.

Unlike querying columns from tables, PostgresSQL doesn't know that the column cve_code that was called from view issues_base is from table issue. SafeQL already traverses through the queries for more precise checks, but currently, it doesn't traverse over the views to determine nullability checks.

As a workaround for now, SafeQL is smart enough to know that a column is not nullable if you do one of the following options:

• add WHERE issue_id IS NOT NULL
• add a COALESCE with a fallback value.

from safeql.

Thank you!

from safeql.