Function sanitize_sql 

pub fn sanitize_sql(input: &str) -> String

Sanitize SQL input to prevent SQL injection

This function escapes SQL special characters. However, parameterized queries should always be preferred over manual sanitization.

Warning

This is a last-resort defense. Always use parameterized queries when possible.

Example

use mockforge_core::validation::sanitize_sql;

let input = "admin' OR '1'='1";
let safe = sanitize_sql(input);
assert_eq!(safe, "admin'' OR ''1''=''1");