- Add identifier validation regex to database and snowflake_schema fields
in SnowflakeSearchToolInput to reject malicious values at schema level
- Add _validate_identifier() runtime check in SnowflakeSearchTool._run()
and double-quote identifiers in USE DATABASE/SCHEMA SQL statements
- Add _validate_identifier() to NL2SQLTool to sanitize table_name in
_fetch_all_available_columns() preventing second-order SQL injection
- Add comprehensive tests for both tools covering injection vectors
Closes#4993
Co-Authored-By: João <joao@crewai.com>
