The postgres driver needs to transforms jsonValue function calls to
rename the function and apply postgres specific cast operations. If the
current implementation is provided a user-controlled path expression,
the generated query can be manipulated.

Thanks to Himanshu Anand for reporting this