fix: prevent SQL injection in overwrite.c#354

Closed

devin-ai-integration[bot] wants to merge 12 commits intomainfrom devin/1734721422-minimal-sql-fix

+74-3

Commits on Dec 20, 2024

fix: prevent SQL injection in user-provided queries

devin-ai-integration[bot]
and
liquidaty
committed
style: apply clang-format fixes to overwrite.c

devin-ai-integration[bot]
and
liquidaty
committed
fix: add missing string.h include to resolve implicit function declaration

devin-ai-integration[bot]
and
liquidaty
committed
fix: use zsv_strincmp_ascii to avoid utf8proc dependency

devin-ai-integration[bot]
and
liquidaty
committed
style: fix indentation in zsv_strincmp_ascii call

devin-ai-integration[bot]
and
liquidaty
committed
refactor: use SQLite parser to validate SQL queries

devin-ai-integration[bot]
and
liquidaty
committed
refactor: move SQL validation after database connection

devin-ai-integration[bot]
and
liquidaty
committed
refactor: use SQLite parser to validate SQL queries and verify required columns

devin-ai-integration[bot]
and
liquidaty
committed
fix: make timestamp column optional in SQL validation

devin-ai-integration[bot]
and
liquidaty
committed
fix: update SQL validation to handle 'col' column name

devin-ai-integration[bot]
and
liquidaty
committed
fix: update column names in SQL validation and default query

devin-ai-integration[bot]
and
liquidaty
committed
style: fix SQL query string formatting

devin-ai-integration[bot]
and
liquidaty
committed