From 8420b9be041d1583dfa9ae327b5ae79aa0bd728b Mon Sep 17 00:00:00 2001
From: PThorpe92 <preston@turso.tech>
Date: Mon, 22 Sep 2025 09:42:28 -0400
Subject: [PATCH] Disable runtime extension loading unless enabled

---
 core/vdbe/execute.rs | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/core/vdbe/execute.rs b/core/vdbe/execute.rs
index ec1c9b526..efe652686 100644
--- a/core/vdbe/execute.rs
+++ b/core/vdbe/execute.rs
@@ -4781,6 +4781,9 @@ pub fn op_function(
             #[cfg(feature = "fs")]
             #[cfg(not(target_family = "wasm"))]
             ScalarFunc::LoadExtension => {
+                if !program.connection.db.can_load_extensions() {
+                    crate::bail_parse_error!("runtime extension loading is disabled");
+                }
                 let extension = &state.registers[*start_reg];
                 let ext = resolve_ext_path(&extension.get_value().to_string())?;
                 program.connection.load_extension(ext)?;