fix: sanitize array elements in list_condition_expr to prevent SQL injection#1713

Merged

nitisht merged 7 commits into

parseablehq:mainfrom

prabhaks:fix/sql-injection-list-condition-expr

Jul 4, 2026

Commits on Jul 2, 2026

fix: sanitize array elements in list_condition_expr to prevent SQL injection
Prabhakar Singh
committed
fix: relax over-restrictive allowlist in sanitize_array_elements
Prabhakar Singh
committed
test: add unit tests for sanitize_array_elements and list_condition_expr
Prabhakar Singh
committed
test: fix false-negative assertion in single-quote injection test
Prabhakar Singh
committed
fix: quote-aware splitting in sanitize_array_elements
Prabhakar Singh
committed
Merge branch 'main' into fix/sql-injection-list-condition-expr
Prabhakar Singh
authored
fix: resolve Clippy lints in split_array_elements
Prabhakar Singh
committed