fix(db2): escape SQL identifiers and literals in metadata/DDL paths (#1914) - #2173

Open

HandSonic wants to merge 6 commits into

OtterMind:mainfrom

HandSonic:fix/sqli-db2

Commits on Jul 26, 2026

fix(db2): escape SQL identifiers and literals in metadata/DDL paths (#1914)
HandSonic
committed
fix(db2): close fallback-column and db2look option-string injection paths (#1914)
HandSonic
committed
fix(db2): quote inherited drop/truncate paths and tighten type/default validation (#1914)
HandSonic
committed
fix(db2): harden default-value and type validators against breakout payloads (#1914)
HandSonic
committed
refactor(db2): move escaping into Db2IdentifierProcessor per maintainer review (#1914)
HandSonic
committed
fix(db2): keep SPI quoteIdentifier conditional, reserve always-quote for DDL paths (#1914)
HandSonic
committed