From 3fbb41b9802e5ab0c635559be300c6d0555fbbe7 Mon Sep 17 00:00:00 2001 From: Christopher Gondek Date: Wed, 5 Nov 2025 11:23:54 +0100 Subject: [PATCH] fix: sanitize SQL queries by removing trailing semicolons --- src/dataquery/service.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/dataquery/service.py b/src/dataquery/service.py index 19d6721..d8dfee9 100644 --- a/src/dataquery/service.py +++ b/src/dataquery/service.py @@ -86,6 +86,9 @@ class DataQueryService: """ max_limit = settings.SQL_ROW_LIMIT + # Strip trailing semicolons and whitespace to prevent multi-statement errors + query = query.rstrip("; \t\n\r") + # Remove comments and normalize whitespace for parsing cleaned_query = re.sub(r"--.*$", "", query, flags=re.MULTILINE) cleaned_query = re.sub(r"/\*.*?\*/", "", cleaned_query, flags=re.DOTALL)