Skip to content

fix(security): prevent SQL injection in schema introspection and context actions - #63

Merged
ZhuchkaTriplesix merged 1 commit into
devfrom
issue/52-prevent-sql-injection-in-schema-and-actions
Sep 27, 2026
Merged

ZhuchkaTriplesix merged 1 commit into
devfrom
issue/52-prevent-sql-injection-in-schema-and-actions

Conversation

@ZhuchkaTriplesix

Copy link
Copy Markdown
Member

Summary

  • Implemented sql_escape utility with escape_sql_string_literal and quote_identifier
  • Applied identifier quoting (`db`.`table`) and literal escaping across SDUI context actions
  • Applied SQL string escaping to database, table, and partition schema introspection queries
  • Added comprehensive unit tests and SQL injection regression test cases

Closes #52

@ZhuchkaTriplesix
ZhuchkaTriplesix merged commit d1ed268 into dev Sep 27, 2026
2 checks passed
@ZhuchkaTriplesix
ZhuchkaTriplesix deleted the issue/52-prevent-sql-injection-in-schema-and-actions branch September 27, 2026 20:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant