added a test case
fixed vulnerability in sql generated by expressions
ver2.3.2
Merge remote-tracking branch 'origin/devel'