fix: escape double quotes in SQL identifier quoting

Author: mkemeter

src/main/java/org/sap/cytoscape/internal/utils/HanaUtils.java

@@ -21,7 +21,7 @@ public static String toStrNull(Object obj){
      * @return      Quoted String
      */
     public static String quoteIdentifier(String id){
-        return '"' + id + '"';
+        return '"' + id.replace("\"", "\"\"") + '"';
     }
 
     /**

src/test/java/HanaUtilsTest.java

@@ -37,6 +37,13 @@ public void testQuoteIdentifier_emptyString() {
         Assert.assertEquals("\"\"", HanaUtils.quoteIdentifier(""));
     }
 
+    @Test
+    public void testQuoteIdentifier_containsDoubleQuote() {
+        // An embedded " must be escaped as "" per SQL standard identifier quoting.
+        // Without escaping, foo"bar produces "foo"bar" which breaks out of the identifier.
+        Assert.assertEquals("\"foo\"\"bar\"", HanaUtils.quoteIdentifier("foo\"bar"));
+    }
+
     // -------------------------------------------------------------------------
     // isCloudEdition
     // -------------------------------------------------------------------------