d1 import: block DEFAULT/REFERENCES SQL injection into executed DDL#1304

Draft

mscoutermarsh wants to merge 3 commits into

mainfrom

cursor/d1-default-sql-injection-23b4

Commits on Jul 22, 2026

d1 import: stop emitting untrusted DEFAULT/REFERENCES SQL verbatim

cursoragent
and
mscoutermarsh
committed
d1 import: stop parseTableBody at balanced CREATE TABLE close

cursoragent
and
mscoutermarsh
committed
d1 import: run injection assertions before optional Postgres skip

cursoragent
and
mscoutermarsh
committed