GORM 实体搜索 LIKE 转义收尾：6 站点复用 EscapeLike + 显式 ESCAPE 子句，含 OAuth 用户名冲突误报修复

Result: {"status":"keep","total_issues":8,"eslint_errors":0,"eslint_problems":0,"eslint_warnings":0,"golint_canonicalheader":0,"golint_errname":0,"golint_errorlint":1,"golint_exhaustive":0,"golint_forcetypeassert":0,"golint_gosec":0,"golint_intrange":0,"golint_modernize":3,"golint_nilnil":3,"golint_perfsprint":0,"golint_prealloc":0,"golint_recvcheck":1,"golint_test_testifylint":0,"golint_test_thelper":0,"golint_test_total":0,"golint_test_usetesting":0,"golint_total":8,"golint_usestdlibvars":0,"golint_vetx_total":0,"golint_wastedassign":0,"measure_s":102,"tsc_errors":0,"vitest_failed":0,"vitest_total":126}

internal/repository/task_execution.go

@@ -16,6 +16,7 @@ import (
 	db "github.com/Rain-kl/Wavelet/internal/infra/persistence"
 	"github.com/Rain-kl/Wavelet/internal/infra/persistence/idgen"
 	"github.com/Rain-kl/Wavelet/internal/model"
+	"github.com/Rain-kl/Wavelet/pkg/util"
 )
 
 const (
@@ -152,7 +153,7 @@ func ListTaskExecutions(ctx context.Context, req model.ListTaskExecutionsRequest
 	} else if types := parseTaskTypesFilter(req.TaskTypes); len(types) > 0 {
 		query = query.Where("task_type IN ?", types)
 	} else if req.TaskTypePrefix != "" {
-		query = query.Where("task_type LIKE ?", req.TaskTypePrefix+"%")
+		query = query.Where("task_type LIKE ? ESCAPE '\\'", util.EscapeLike(req.TaskTypePrefix)+"%")
 	}
 
 	var total int64

internal/repository/upload.go

@@ -13,6 +13,7 @@ import (
 
 	db "github.com/Rain-kl/Wavelet/internal/infra/persistence"
 	"github.com/Rain-kl/Wavelet/internal/model"
+	"github.com/Rain-kl/Wavelet/pkg/util"
 )
 
 // UploadListFilter filters paginated upload queries.
@@ -50,7 +51,7 @@ func ListUploads(ctx context.Context, filter UploadListFilter) (int64, []model.U
 		query = query.Where("user_id = ?", filter.UserID)
 	}
 	if filter.Keyword != "" {
-		query = query.Where("LOWER(file_name) LIKE ?", "%"+strings.ToLower(filter.Keyword)+"%")
+		query = query.Where("LOWER(file_name) LIKE ? ESCAPE '\\'", "%"+util.EscapeLike(strings.ToLower(filter.Keyword))+"%")
 	}
 	if filter.Type != "" {
 		query = query.Where("type = ?", filter.Type)

internal/repository/user.go

@@ -11,6 +11,7 @@ import (
 	db "github.com/Rain-kl/Wavelet/internal/infra/persistence"
 	"github.com/Rain-kl/Wavelet/internal/infra/persistence/idgen"
 	"github.com/Rain-kl/Wavelet/internal/model"
+	"github.com/Rain-kl/Wavelet/pkg/util"
 	"gorm.io/gorm"
 )
 
@@ -70,10 +71,10 @@ func ListAdminUsers(ctx context.Context, filter AdminUserListFilter) (int64, []m
 		query = query.Where("id = ?", *filter.UserID)
 	}
 	if filter.Username != "" {
-		query = query.Where("username LIKE ?", filter.Username+"%")
+		query = query.Where("username LIKE ? ESCAPE '\\'", util.EscapeLike(filter.Username)+"%")
 	}
 	if filter.Email != "" {
-		query = query.Where("email LIKE ?", filter.Email+"%")
+		query = query.Where("email LIKE ? ESCAPE '\\'", util.EscapeLike(filter.Email)+"%")
 	}
 
 	var total int64
@@ -185,7 +186,7 @@ func ListUserIDsByUsernameContains(ctx context.Context, username string) ([]uint
 	}
 	var userIDs []uint64
 	if err := db.DB(ctx).Model(&model.User{}).
-		Where("username LIKE ?", "%"+username+"%").
+		Where("username LIKE ? ESCAPE '\\'", "%"+util.EscapeLike(username)+"%").
 		Pluck("id", &userIDs).Error; err != nil {
 		return nil, err
 	}
@@ -225,7 +226,7 @@ func CreateUserFromOAuth(ctx context.Context, userOut *model.User, oauthInfo *mo
 func ListUsernamesMatchingBase(ctx context.Context, base string) ([]string, error) {
 	var names []string
 	if err := db.DB(ctx).Model(&model.User{}).
-		Where("username = ? OR username LIKE ?", base, base+"-%").
+		Where("username = ? OR username LIKE ? ESCAPE '\\'", base, util.EscapeLike(base)+"-%").
 		Pluck("username", &names).Error; err != nil {
 		return nil, err
 	}