copilot-swe-agent[bot] a7cc42044b fix: Improved SQL injection protection with proper handling ...

- Fixed IN clause to conditionally quote only string values (not numeric)
- Fixed LIKE pattern sanitization to preserve wildcards while preventing injection
- Improved dangerous pattern removal with case-insensitive regex while preserving case
- All funcspec tests now pass (except pre-existing TestReplaceMetaVariables)

Co-authored-by: warkanum <208308+warkanum@users.noreply.github.com>

2025-12-31 07:24:56 +00:00

34 KiB

Raw Blame History

View Raw