Matthew Rathbone 1c145aee61 fix: escape user-supplied values in SQL queries (buildSchemaFilter + Trino) ...

- buildSchemaFilter now uses escapeString() to escape single quotes in
  schema, only, and ignore filter values.
- Trino driver now wraps this.db with wrapIdentifier() in all queries
  (listSchemas, listTables, listTableColumns, buildPaginatedQuery).
- Trino listTableColumns escapes table and schema string literals.
- Added unit tests for SQL injection in buildSchemaFilter and Trino.

2026-03-06 14:33:55 -07:00

..

handlers

address feedback :)

2026-01-23 00:22:42 -07:00

lib

fix: escape user-supplied values in SQL queries (buildSchemaFilter + Trino)

2026-03-06 14:33:55 -07:00

plugin-system/modules

refactor

2026-02-17 17:44:14 +07:00