镜像站点 · 本页由第三方 GitHub 只读镜像提供,非 GitHub 官方站点,不接受任何登录或凭据输入。前往 github.com
Skip to content

fix: quote MERGE columns and bound table option expressions - #18

Merged
sdojjy merged 2 commits into
tidbcloud:mainfrom
sdojjy:security/followup-20261106
Nov 6, 2026
Merged

sdojjy merged 2 commits into
tidbcloud:mainfrom
sdojjy:security/followup-20261106

Conversation

@sdojjy

@sdojjy sdojjy commented Nov 6, 2026 •

Copy link
Copy Markdown
Collaborator

Quote INSERT columns consistently with MERGE UPDATE. Validate engine names and raw clustering-expression boundaries while retaining CAST, expression lists, quoted literals and SQLAlchemy expression objects. Reflected values use the same CREATE validation.

Validation:

  • PASS: 79 compiler/security unit tests.
  • PASS: whitespace checks.

@ti-chi-bot ti-chi-bot Bot added the size/L label Nov 6, 2026
@sdojjy
sdojjy merged commit bde9904 into tidbcloud:main Nov 6, 2026
4 checks passed
@sdojjy
sdojjy deleted the security/followup-20261106 branch November 6, 2026 14:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant