Feature description
Identifiers and literals are not fully sanitized or escaped. This can lead to a connector error.
Use PostgreSQL format or quote_ident function sanitize these. It allows for a full query or an individual string.
https://www.postgresql.org/docs/current/functions-string.html#FUNCTIONS-STRING-FORMAT