Fix demo rules usage

[galshubeli]

No description provided.

[overcut-ai]

Completed Working on "Code Review"

✅ Workflow completed successfully.

---

👉 View complete log

[railway-app]

🚅 Deployed to the QueryWeaver-pr-370 environment in queryweaver

Service	Status	Web	Updated (UTC)
QueryWeaver	🕛 Waiting for status checks (View Logs)	Web	Jan 8, 2026 at 3:45 pm

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

[overcut-ai]

Totals by importance

• BLOCKER: 0
• CRITICAL: 0
• MAJOR: 1
• MINOR: 0
• SUGGESTION: 0
• PRAISE: 0

Key themes

1. Demo graph guard can be bypassed because prefix checks happen before graph IDs are sanitized (api/routes/graphs.py).

Actionable next steps

• Normalize or sanitize graph IDs prior to prefix validation so demo-prefixed graphs are always treated as read-only regardless of whitespace or encoding tricks.

[overcut-ai]

[major]: The guard checks graph_id.startswith(GENERAL_PREFIX) before the value goes through _graph_name, which trims whitespace. A request such as /graphs/%20demo_* would bypass this guard yet _graph_name would resolve it to the demo DB, so demo rules remain editable. Please sanitize (or use the sanitized value) before checking the prefix to ensure demo IDs are always blocked.