Skip to content

fix(tcvdb): escape session filter literals#232

Open
YOMXXX wants to merge 1 commit into
TencentCloud:mainfrom
YOMXXX:fix/tcvdb-filter-escaping
Open

fix(tcvdb): escape session filter literals#232
YOMXXX wants to merge 1 commit into
TencentCloud:mainfrom
YOMXXX:fix/tcvdb-filter-escaping

Conversation

@YOMXXX

@YOMXXX YOMXXX commented Jun 20, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Escape backslashes and double quotes before interpolating session_key / session_id into TCVDB filter expressions.
  • Add a regression test that captures generated L1/L0 query filters for injection-shaped session values.

Verification

  • npm test -- --run
  • npm run build

Signed-off-by: 李冠辰 <liguanchen@xiaomi.com>
@Maxwell-Code07

Copy link
Copy Markdown
Collaborator

Thanks for this fix! Session filter injection was indeed a security concern — properly escaping backslashes and double quotes, plus adding a regression test, very thorough work 👍

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants