sqlite-http

This is such a huge step forward for the usability of custom SQLite extensions in Python world. Alex has a whole family of SQLite extensions that he's built in Rust which are worth checking out: - sqlite-xsv: https://github.com/asg017/sqlite-xsv - sqlite-fastrand: https://github.com/asg017/sqlite-fastrand - sqlite-ulid: https://github.com/asg017/sqlite-ulid - sqlite-jsonschema: https://github.com/asg017/sqlite-jsonschema - sqlite-regex: https://github.com/asg017/sqlite-regex - sqlite-url: https://github.com/asg017/sqlite-url - sqlite-http: https://github.com/asg017/sqlite-http - sqlite-lines: https://github.com/asg017/sqlite-lines - sqlite-path: https://github.com/asg017/sqlite-path - sqlite-html: https://github.com/asg017/sqlite-html

Yeah, "dont make network requests from the database" is a common antipattern, but it doesn't quite apply with sqlite-http. It's mainly meant for data processing scripts that use SQL, which is typically on a local database file with pretty low risk. You probably wouldn't want/need sqlite-http on a SQLite db that a live application uses, unless you use the no network[0] option [0] https://github.com/asg017/sqlite-http/blob/main/docs.md#no-n...

On SSRF: There is a "no network"[0] option for the extension, if you don't trust SQL input. This is what the example Datasette server[1] uses Also to note, this is mainly meant for use with local data processing, I doubt there's a need for sqlite-http in a SQLite DB used in regular applications. If you're just wrangling some data locally with SQLite with these extensions, I doubt there's much of a security risk [0] https://github.com/asg017/sqlite-http/blob/main/docs.md#no-n... [1] https://sqlite-extension-examples.fly.dev/data?sql=select+*+...

Author here, happy to answer questions! Direct link to the project: https://github.com/asg017/sqlite-http Few other projects of interest: - sqlite-html: https://github.com/asg017/sqlite-html - sqlite-lines: https://github.com/asg017/sqlite-lines - various other extensions: https://github.com/nalgeon/sqlean And past HN threads: - https://news.ycombinator.com/item?id=32335295 - https://news.ycombinator.com/item?id=32288165