Trim user input before sending to detect_sql_injection

[bitterpanda63]

Strips leading/trailing whitespace from user input before SQL injection detection, matching the fix applied to the Java firewall in AikidoSec/firewall-java#298.

Problem: An attacker can pad their payload with trailing whitespace (e.g. "payload "). If the DB driver trims this before execution, the SQL query won't contain the padded input, causing should_return_early to incorrectly return True (missed detection).

Fix: Apply .lower().strip() to the user input before both the early-return check and the native detection call.

See: AikidoSec/firewall-java#298

Summary by Aikido

Security Issues: 0	Quality Issues: 0	Resolved Issues: 0

🐛 Bugfixes

• Trimmed and lowercased user input before SQL injection detection

^{More info}