long-agent 32a3d4c9e0 fix: P0-01 prevent LIKE injection in operation_log and device repos ...

- operation_log.go Search(): add escapeLikePattern + ESCAPE clause
- device.go ListAllCursor(): add escapeLikePattern + ESCAPE clause

The ESCAPE clause is required for SQLite to properly interpret
backslash as an escape character.

2026-04-18 13:06:44 +08:00

9.3 KiB

Raw Blame History

View Raw