fix: changed query to accept user input in prepared sql statement

[deepakrai9185720]

Description

Github reported few vulnerability. Mentioning the slack conversation:
https://rudderlabs.slack.com/archives/C049T5P2Z97/p1667507291386099

Notion Ticket

https://www.notion.so/rudderstacks/SQL-injection-vulnerability-in-TriggerWHUploads-rudder-server-25b7e45711034ad7889f458ad24768b0

Security

• The code changed/added as part of this pull request won't create any security issues with how the software is being used.

[codecov]

Codecov Report

Base: 43.74% // Head: 43.76% // Increases project coverage by +0.02% 🎉

Coverage data is based on head (88e8ea8) compared to base (00ba231).
Patch coverage: 37.50% of modified lines in pull request are covered.

❗ Current head 88e8ea8 differs from pull request most recent head 8bc8242. Consider uploading reports for the commit 8bc8242 to get more accurate results

Additional details and impacted files

@@            Coverage Diff             @@
##           master    #2652      +/-   ##
==========================================
+ Coverage   43.74%   43.76%   +0.02%     
==========================================
  Files         187      187              
  Lines       39993    39999       +6     
==========================================
+ Hits        17494    17505      +11     
+ Misses      21403    21395       -8     
- Partials     1096     1099       +3     

Impacted Files	Coverage Δ
warehouse/warehouse.go	8.68% <37.50%> (-0.15%)	⬇️
services/rsources/handler.go	69.72% <0.00%> (-1.39%)	⬇️
processor/processor.go	72.02% <0.00%> (+0.77%)	⬆️
config/backend-config/namespace_config.go	73.95% <0.00%> (+3.12%)	⬆️

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

☔ View full report at Codecov.
📢 Do you have feedback about the report comment? Let us know in this issue.

[lvrach]

Ideally, we need to use pq.QuoteIdentifier for table/column names as well.

[deepakrai9185720]

Done for the said variable. Doing it for the whole code will take time. Should we do it after as soon as get some bandwidth? Wdyt?

[lvrach]

Yeah, let's discuss further refactoring and prioritise accordingly.

[lvrach]

With some minor comments