[bherila]

Motivation

• The data-browser allowed attacker-controlled where fragments to be concatenated into MariaDB SQL and, when combined with the workspace sqlx downgrade, exposed a viable SQL exfiltration primitive.
• The existing denylist missed token-bounded constructs such as SELECT subqueries and MariaDB error-producing XML functions, and query error details were echoed to callers, which could leak sensitive database responses.

Description

• Reject token-bounded SELECT subqueries and MariaDB error-producing functions by adding select, extractvalue, and updatexml to the validate_where_clause checks and switching to a token-aware matcher implemented as contains_sql_keyword.
• Improve the validate_where_clause logic to use contains_sql_keyword(...) so keywords are matched as tokens rather than via naive substring checks.
• Stop returning raw DB error text and the SQL statement to clients by replacing the provider DataError::QueryFailed payload with a generic message and by sanitizing problem details in the HTTP handler so QueryFailed responses say Query failed; check server logs for details.
• Add regression unit tests covering rejected subqueries, extractvalue/updatexml, and sleep(...) expressions and update CHANGELOG.md under ## [Unreleased] with a short entry describing the fix.

Testing

• Ran cargo fmt --all --check which succeeded.
• Ran cargo test -p temps-providers validates_where_clause --lib -- --nocapture which passed (1 passed).
• Ran cargo check -p temps-providers --lib which completed successfully.

---

Codex Task

[github-actions]

📓 Changelog preview

This is what your commits will add to the generated CHANGELOG.md at release time (via git-cliff). Do not edit CHANGELOG.md by hand — it is generated from your Conventional Commit messages.

## [Unreleased]

### Added

- **devcontainer:** Prefetch cargo deps and background-build on create

### CI

- **self-hosted:** Add build/test workflow on push to bherila fork
- **self-hosted:** Recreate example-plugin web/dist before cargo check
- **self-hosted:** Also recreate temps-cli/dist placeholder
- **self-hosted:** Run hosted unit-test crate set, skip integration-heavy crates
- **self-hosted:** Exclude temps-screenshots live-browser tests

### Documentation

- Add local resource-awareness guidance to CLAUDE.md
- Emphasize local resource awareness with concurrent worktrees/agents

### Fixed

- **providers:** Harden MariaDB query filters

### Miscellaneous

- **ci:** Remove dead self-hosted-ci workflow

[bherila]

This proposal was superseded by fork PR #53, whose functional changes were included in merged upstream gotempsh#677. Upstream gotempsh#676 explicitly records this supersession.

Fork main has now been fast-forwarded to upstream main at 7250ab59b38d3138014ade7f5d6391c856eaa4f7. Closing this obsolete fork PR as part of the upstream synchronization; its branch history is retained.