fix codeql issues #129
Description
we have a bunch of high severity alerts bc a bunch of queries are built from user provided data, should fix those
{{ message }}
we have a bunch of high severity alerts bc a bunch of queries are built from user provided data, should fix those