{"record":{"id":"b50c997db9525a3a","repo":"Tencent/WeKnora","slug":"subplan-nodes-are-not-allowed","errorCode":null,"errorMessage":"SubPlan nodes are not allowed","messagePattern":"SubPlan nodes are not allowed","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"internal/utils/inject.go","lineNumber":2063,"sourceCode":"\t\t\t\treturn err\n\t\t\t}\n\t\t}\n\t\tfor _, order := range wd.OrderClause {\n\t\t\tif err := v.validateNode(order, result); err != nil {\n\t\t\t\treturn err\n\t\t\t}\n\t\t}\n\t\tif err := v.validateNode(wd.StartOffset, result); err != nil {\n\t\t\treturn err\n\t\t}\n\t\tif err := v.validateNode(wd.EndOffset, result); err != nil {\n\t\t\treturn err\n\t\t}\n\t}\n\n\t// SubPlan - BLOCK: This is an internal representation, should not appear in user queries\n\tif node.GetSubPlan() != nil {\n\t\treturn fmt.Errorf(\"SubPlan nodes are not allowed\")\n\t}\n\n\t// AlternativeSubPlan - BLOCK\n\tif node.GetAlternativeSubPlan() != nil {\n\t\treturn fmt.Errorf(\"AlternativeSubPlan nodes are not allowed\")\n\t}\n\n\t// ============================================================\n\t// SECURITY: DEFAULT-DENY.\n\t// The recursive branches above validate every expression type we know how\n\t// to inspect. Any node type NOT in the recognized set below is REJECTED,\n\t// because an unhandled type can smuggle a dangerous FuncCall past the\n\t// blacklist (e.g. PG17's JSON_SCALAR wrapping pg_read_file). Whenever a new\n\t// recursive handler is added above, add its Node_* wrapper here as well.\n\t// ============================================================\n\tswitch node.Node.(type) {\n\tcase\n\t\t// Recognized expression types (validated recursively above).","sourceCodeStart":2045,"sourceCodeEnd":2081,"githubUrl":"https://github.com/Tencent/WeKnora/blob/988cbb03305e055d8ebb7d46d9ac6cc0803cd074/internal/utils/inject.go#L2045-L2081","documentation":"Default-deny guard in validateNode: a SubPlan node was found. SubPlan is an internal planner representation that should never appear in a user-parsed query, so its presence indicates a smuggled or malformed AST and the query is rejected.","triggerScenarios":"Thrown at internal/utils/inject.go:2063 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Rewrite the query without subquery expressions","Treat this as an attempted bypass and log it for security review","Ensure only freshly parsed user SQL reaches the validator"],"exampleFix":null,"handlingStrategy":"validation","validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"988cbb03305e055d8ebb7d46d9ac6cc0803cd074","analyzedAt":"2026-09-02T14:41:08.344Z","contentChangedAt":null,"schemaVersion":2},"datasetVersion":"2026-09-08T10:18:20.063Z"}