problem

Task custom field creation builds parts of a schema update from field configuration values. For combobox fields, the default value is not quoted through the database adapter before being used in the generated SQL statement.

solution

Use database adapter quoting for dynamic default values, validate combobox option keys before schema changes, and add regression coverage for values containing quotes or SQL control characters.

Testing

See testinstructions.