AI-written code inserted the user-supplied `regConfig` into SQL without parameterization or validation, enabling SQL injection in Marten’s full-text search APIs.

@@ -65,4 +66,6 @@ public ISqlFragment Parse(IQueryableMemberCollection memberCollection, IReadOnly             searchTerm,

+    }+}

+using System.Text.RegularExpressions; using Marten.Linq.Parsing.Methods.FullText; using Marten.Schema; using Weasel.Postgresql;@@ -10,6 +12,17 @@ namespace Marten.Linq.SqlGeneration.Filters;  internal class FullTextWhereFragment: ISqlFragment {+    // PostgreSQL text-search configuration names are stored as identifiers in+    // pg_ts_config (see https://www.postgresql.org/docs/current/textsearch-configuration.html).+    // We allow simple unquoted identifiers — optionally schema-qualified — so values+    // like "english", "french", or "pg_catalog.english" pass through, while anything

     private readonly string _dataConfig;     private readonly string _regConfig;     private readonly FullTextSearchFunction _searchFunction;@@ -18,13 +31,32 @@ internal class FullTextWhereFragment: ISqlFragment

         _dataConfig = GetDataConfig(mapping, regConfig).Replace("data", "d.data");         _searchFunction = searchFunction;

+                "regConfig must be a simple PostgreSQL identifier (optionally schema-qualified), " ++                "matching ^[a-zA-Z_][a-zA-Z0-9_]*(\\.[a-zA-Z_][a-zA-Z0-9_]*)?$.",+                nameof(regConfig));+        }+    }+     // don't parameterize full-text search config as it ruins the performance with the query plan in PG     private string Sql =>         $"to_tsvector('{_regConfig}'::regconfig, {_dataConfig}) @@ {_searchFunction}('{_regConfig}'::regconfig, ?)";

+using Marten.Linq;+using Marten.Testing.Harness;+using Shouldly;+using Xunit;++namespace LinqTests.Bugs;++// Reproduces and locks down the SQL injection vector reported against the+// regConfig parameter on Marten's full-text search APIs. Pre-fix, the regConfig+// string was interpolated directly into the generated SQL by+// FullTextWhereFragment, making every overload below a sink for arbitrary+// PostgreSQL syntax: time-based blind, information disclosure, DDL, etc.+//+// The tests below assert that a regConfig value containing an obvious payload+// (single quote, semicolon, comment marker, sleep call) does NOT survive into+// the generated SQL — either by being rejected at query-construction time+// (preferred) or by being stripped/escaped. Either outcome breaks the+// injection vector.+public class full_text_regconfig_sql_injection+{+    private const string TimeBasedBlindPayload = "english'::text); SELECT pg_sleep(5); --";+    private const string ExfiltrationPayload = "english'; SELECT version(); --";+    private const string DdlPayload = "english'; DROP TABLE mt_doc_article; --";++    public class Article+    {+        public Guid Id { get; set; }+        public string Title { get; set; } = string.Empty;+        public string Body { get; set; } = string.Empty;+    }++    private static IDocumentStore BuildStore() => DocumentStore.For(opts =>+    {+        opts.Connection(ConnectionSource.ConnectionString);+        opts.AutoCreateSchemaObjects = AutoCreate.None;+    });++    // The full set of full-text search overloads that take a user-controllable+    // regConfig argument and route through FullTextWhereFragment.+    public static TheoryData<string, Func<IQueryable<Article>, string, IQueryable<Article>>> Overloads => new()+    {+        { nameof(LinqExtensions.Search),          (q, rc) => q.Where(x => x.Search("term", rc)) },+        { nameof(LinqExtensions.PlainTextSearch), (q, rc) => q.Where(x => x.PlainTextSearch("term", rc)) },+        { nameof(LinqExtensions.PhraseSearch),    (q, rc) => q.Where(x => x.PhraseSearch("term", rc)) },+        { nameof(LinqExtensions.WebStyleSearch),  (q, rc) => q.Where(x => x.WebStyleSearch("term", rc)) },+        { nameof(LinqExtensions.PrefixSearch),    (q, rc) => q.Where(x => x.PrefixSearch("term", rc)) },+    };++    private static readonly string[] InjectionPayloads =+    [+        TimeBasedBlindPayload,+        ExfiltrationPayload,+        DdlPayload,+    ];++    [Theory]+    [MemberData(nameof(Overloads))]+    public void rejects_injection_payloads_in_regConfig(+        string overloadName,+        Func<IQueryable<Article>, string, IQueryable<Article>> apply)+    {+        _ = overloadName;+        using var store = BuildStore();+        using var session = store.LightweightSession();++        foreach (var payload in InjectionPayloads)+        {+            var query = apply(session.Query<Article>(), payload);++            // Either the query refuses to materialise (validation throws), or+            // the rendered SQL must NOT contain the raw payload. Both outcomes+            // close the injection vector; we accept either.+            string? sql = null;+            try+            {+                sql = query.ToCommand(FetchType.FetchMany).CommandText;+            }+            catch (ArgumentException)+            {+                // Acceptable: validation rejected the input before SQL was generated.+                continue;+            }++            // None of these tokens should ever appear in SQL generated from a+            // legitimate full-text search; their presence means the payload was