Fix/n1ql injection hardening - #820

Open

ejscribner wants to merge 8 commits into

fix/n1ql-injection-hardening

Commits on Aug 11, 2026

fix(query): prevent N1QL injection via unescaped string literals

ejscribner
and
claude
committed
9ccb505
fix(query): validate sort direction before interpolating it

ejscribner
and
claude
committed
763a880
fix(query): escape identifiers and validate the statement in buildIndexExpr

ejscribner
and
claude
committed
d32f133
fix(query): strip result-modifier keywords with a valid regex

ejscribner
and
claude
committed
86417e7
fix(indexes): escape identifiers and the model name in N1QL index DDL

ejscribner
and
claude
committed
2842be4
fix(query): reject WHERE field names that are not field paths

ejscribner
and
claude
committed
9688108
fix(query): stop quoting the dash of a negative array subscript

ejscribner
and
claude
committed
cb10bce
fix(query): remove quadratic backtracking from the dash-quoting pass

ejscribner
and
claude
committed
a28870e