fix(mysql): escape SQL identifiers and literals in metadata/DDL paths (#1914) - #2172

Merged

openai0229 merged 6 commits into

OtterMind:mainfrom

HandSonic:fix/sqli-mysql

Jul 29, 2026

Commits on Jul 29, 2026

fix(mysql): escape SQL identifiers and literals in metadata/DDL paths (#1914)

HandSonic
authored and
openai0229
committed
fix(mysql): validate hex literals and double backticks in identifier processor (#1914)

HandSonic
authored and
openai0229
committed
fix(mysql): escape truncate/copy table identifiers and add regression tests (#1914)

HandSonic
authored and
openai0229
committed
refactor(mysql): move escaping into MysqlIdentifierProcessor per maintainer review (#1914)

HandSonic
authored and
openai0229
committed
fix(mysql): keep SPI quoteIdentifier conditional, reserve always-quote for DDL paths (#1914)

HandSonic
authored and
openai0229
committed
fix(mysql): finalize SQL escaping boundaries
openai0229
committed