spring-ai-resos

The project avoids hardcoded secrets by relying on environment variables for API keys and database credentials, and external configuration files (`creds.yml`). The `customQuery` parameter for data filtering directly appends to SQL queries in `PageableCustomerRepository` and `PageableFeedbackRepository`. While a `sanitizeCustomQuery` method is implemented to validate and restrict input using a regular expression, the regex is highly specific and might unintentionally limit functionality or could be brittle. A more robust solution would involve prepared statements or a proper query builder for parameterized queries to eliminate the potential for SQL injection completely. No other obvious malicious patterns or `eval` usage were detected.