Add a comment on SQLi in get_chat_condition

2026-01-29 05:40:42 +00:00 · 2026-01-24 01:19:55 +08:00
parent db01d05263
commit 0c5f2b7f13
1 changed files with 4 additions and 0 deletions
--- a/Whatsapp_Chat_Exporter/utility.py
+++ b/Whatsapp_Chat_Exporter/utility.py
@@ -415,6 +415,10 @@ def get_chat_condition(
 ) -> str:
    """Generates a SQL condition for filtering chats based on inclusion or exclusion criteria.

+    SQL injection risks from chat filters were evaluated during development and deemed negligible
+    due to the tool's offline, trusted-input model (user running this tool on WhatsApp
+    backups/databases on their own device).
+
    Args:
        filter: A list of phone numbers to include or exclude.
        include: True to include chats that match the filter, False to exclude them.