mirror of
https://github.com/forcedotcom/afv-library.git
synced 2026-07-30 11:43:26 +08:00
15 lines
548 B
Python
15 lines
548 B
Python
"""Canonical SQL-escaping helpers for investigating-agentforce-d360.
|
|
|
|
Single source of truth for DC-SQL string-literal escaping. Behavioral contract
|
|
is fixed — do not change the escape strategy without updating every caller and
|
|
its tests.
|
|
"""
|
|
from __future__ import annotations
|
|
|
|
|
|
def _escape_sql_literal(s: str) -> str:
|
|
"""Double single quotes per DC SQL escaping rule. Handles O'Brien →
|
|
O''Brien, `'; DROP --` → `''; DROP --` (still harmless because it's
|
|
wrapped in surrounding single quotes)."""
|
|
return s.replace("'", "''")
|