PostgresCollection implementation is vulnerable to SQLi

[avinashkolluru]

See the method parseQueryForNonCompositeFilter here -

document-store/document-store/src/main/java/org/hypertrace/core/documentstore/postgres/PostgresCollection.java

Line 207 in f9a3b68

protected String parseQueryForNonCompositeFilter(Filter filter) {

We seem to be appending strings to create a SQL statement instead of creating a parameterized query using ? and later setting the corresponding arguments while querying.

This is prone to SQL injection.

[JBAhire]

This has been addressed by #30 so closing this issue.