Address SQL injection and other threats - #51

Merged

Pino de Candia (pinodeca) merged 8 commits into

mainfrom

pinodec/sec-fixes

Mar 13, 2026

Commits on Mar 13, 2026

docs: add security audit findings (T12-T14) and triage doc
Pino de Candia (pinodeca)
committed
15cd134
fix: remediate T12 SPI injection in status/result
Pino de Candia (pinodeca)
committed
7f6fffc
hardening: parameterize internal SPI lookups
Pino de Candia (pinodeca)
committed
a562d15
fix: add deadlock-safe DROP EXTENSION helper for E2E tests
Pino de Candia (pinodeca)
committed
214dd5d
Migrate internal SPI queries to parameterized form
Pino de Candia (pinodeca)
committed
324030e
Harden helper functions with SET search_path; document schema= rationale
Pino de Candia (pinodeca)
committed
d3ab8b5
Remove security-todo.md
Pino de Candia (pinodeca)
committed
727d626
Align security docs with implementation and parameterize graph load queries
Pino de Candia (pinodeca)
committed
6afe23b