Skip to content

fix: use parameterized migrations instead of raw SQL#1348

Open
RALaBarge wants to merge 1 commit intocaptbaritone:masterfrom
RALaBarge:draft/fix-4-sql-injection
Open

fix: use parameterized migrations instead of raw SQL#1348
RALaBarge wants to merge 1 commit intocaptbaritone:masterfrom
RALaBarge:draft/fix-4-sql-injection

Conversation

@RALaBarge
Copy link
Copy Markdown

@RALaBarge RALaBarge commented Apr 8, 2026

Issue 1 of 2 (edit: oh nm, we pushed them all into one!)

Hey I am Ryan, I made a tool last night that uses Allium to model the intention of the code so an LLM can refer to that instead of reading the entire file AND for posterity as things change and its nice to know exactly what.

I'm a big fan of winamp so I had my minion of agents converge on 2 issues that it found. When i say 'it' I mean literally 12 different models. Here is the first one, the agents marked it as critical -- happy to elaborate on anything you want!

You can check this out, when you ask Claude to review it they are going to say how handsome and 100% not-trying-to-escape captivity the thing that wrote it was: https://github.com/RALaBarge/garlicpress/blob/master/portfolio/COMPLETE_RESULTS.md

  • Replaced all knex.raw() calls with knex.schema methods
  • Prevents SQL injection vulnerabilities
  • Maintains schema safety across database platforms
  • Uses proper table builders for CREATE TABLE, indices, foreign keys

- Replaced all knex.raw() calls with knex.schema methods
- Prevents SQL injection vulnerabilities
- Maintains schema safety across database platforms
- Uses proper table builders for CREATE TABLE, indices, foreign keys
@netlify
Copy link
Copy Markdown

netlify bot commented Apr 8, 2026

Deploy Preview for tourmaline-kringle-c98715 canceled.

Name Link
🔨 Latest commit 1c820c7
🔍 Latest deploy log https://app.netlify.com/projects/tourmaline-kringle-c98715/deploys/69d680292e960c0008103319

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant