rag_sec/query_transformer.py

class QueryTransformer:
    def transform_query(self, query):
        if "DROP TABLE" in query or "SELECT *" in query:
            return "Your query appears to contain SQL injection elements. Please rephrase."
        return query