🔒 Fix SQL injection in database migration and resolve merge conflicts

gitea-admin/gh-christianlouis-docuelevate

This commit safely handles the dynamic table names in database migration queries
by leveraging `sqlalchemy.select` and `sqlalchemy.table` in `app/utils/db_migrate.py`.
It addresses the `# noqa: S608` exception that was in place for string interpolation
SQL queries which are a known security anti-pattern.

Additionally, this commit includes the latest updates to `app/views/base.py`
from the `main` branch to handle backward compatibility across Starlette
versions (<1.0 vs 1.0+) when invoking `Jinja2Templates.TemplateResponse`,
resolving previous merge conflicts in the PR.

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

This commit is contained in:

google-labs-jules[bot]

2026-03-23 15:56:34 +00:00

parent 7755f5a1ed

commit a10f8e628e

7 changed files with 364 additions and 15 deletions

templates/files.html

View File

				`@@ -0,0 +1 @@`
				`Hello`