From 85bb0f78742457b6424a1b3328e2bf7f2d61139d Mon Sep 17 00:00:00 2001
From: Hein <hein@bitechsystems.co.za>
Date: Mon, 18 May 2026 12:13:06 +0200
Subject: [PATCH] fix(funcspec): update meta variable replacement in SQL query

---
 pkg/funcspec/function_api_test.go | 2 +-
 pkg/restheadspec/headers.go       | 3 ++-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/pkg/funcspec/function_api_test.go b/pkg/funcspec/function_api_test.go
index 39f6076..f8ece7d 100644
--- a/pkg/funcspec/function_api_test.go
+++ b/pkg/funcspec/function_api_test.go
@@ -821,7 +821,7 @@ func TestReplaceMetaVariables(t *testing.T) {
 			name:     "Replace [user]",
 			sqlQuery: "SELECT * FROM audit WHERE username = [user]",
 			expectedCheck: func(result string) bool {
-				return strings.Contains(result, "'testuser'")
+				return strings.Contains(result, "$USR$testuser$USR$")
 			},
 		},
 		{
diff --git a/pkg/restheadspec/headers.go b/pkg/restheadspec/headers.go
index fb19255..c347850 100644
--- a/pkg/restheadspec/headers.go
+++ b/pkg/restheadspec/headers.go
@@ -8,6 +8,7 @@ import (
 	"regexp"
 	"strconv"
 	"strings"
+	"unicode/utf8"
 
 	"github.com/bitechdev/ResolveSpec/pkg/common"
 	"github.com/bitechdev/ResolveSpec/pkg/logger"
@@ -103,7 +104,7 @@ func DecodeParam(pStr string) (string, error) {
 		code, _ = DecodeParam(code)
 	} else {
 		strDat, err := base64.StdEncoding.DecodeString(code)
-		if err == nil {
+		if err == nil && utf8.Valid(strDat) {
 			code = string(strDat)
 		}
 	}