fix: replace string-based SQL injection in inject_block_filter with AST manipulation#75

Open

gakonst wants to merge 5 commits intomainfrom

fix/sql-injection-inject-block-filter

Commits on Feb 6, 2026

fix: replace string-based SQL injection in inject_block_filter with AST manipulation

gakonst
and
ampcode-com
committed
fix: add table allowlist to query validator and read-only API role

gakonst
and
ampcode-com
committed
fix: close DoS, privilege escalation, and file read bypass vectors

gakonst
and
ampcode-com
committed

Commits on Feb 10, 2026