sanitizeColumnName function

String sanitizeColumnName(
  1. String name
)

Validates a column name to prevent SQL injection. Accepts only identifiers matching ^[a-zA-Z_][a-zA-Z0-9_]*$.

Implementation

String sanitizeColumnName(String name) {
  if (!RegExp(r'^[a-zA-Z_][a-zA-Z0-9_]*$').hasMatch(name)) {
    throw ArgumentError('Invalid column name: $name');
  }
  return name;
}