prompt: We are currently solving the following issue within our repository. Here is the issue text:
  --- BEGIN ISSUE ---
  Django Component Governance vulnerability
  Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter). By passing a suitably crafted delimiter to a contrib.postgres.aggregates.StringAgg instance, it was possible to break escaping and inject malicious SQL.
  
  https://dev.azure.com/FuseLabs/SDK_v4/_componentGovernance/112465/alert/2370216?typeId=4354877
  
  --- END ISSUE ---
  
  Below are some code segments, each from a relevant file. One or more of these files may contain bugs.
  --- BEGIN FILES ---
  Path: `libraries/botbuilder-applicationinsights/setup.py`
  Content:
  ```
  1 # Copyright (c) Microsoft Corporation. All rights reserved.
  2 # Licensed under the MIT License.
  3 
  4 import os
  5 from setuptools import setup
  6 
  7 REQUIRES = [
  8     "applicationinsights==0.11.9",
  9     "botbuilder-schema==4.15.0",
  10     "botframework-connector==4.15.0",
  11     "botbuilder-core==4.15.0",
  12 ]
  13 TESTS_REQUIRES = [
  14     "aiounittest==1.3.0",
  15     "django==2.2.6",  # For samples
  16     "djangorestframework==3.10.3",  # For samples
  17     "flask==1.1.1",  # For samples
  18 ]
  19 
  20 root = os.path.abspath(os.path.dirname(__file__))
  21 
  22 with open(os.path.join(root, "botbuilder", "applicationinsights", "about.py")) as f:
  23     package_info = {}
  24     info = f.read()
  25     exec(info, package_info)
  26 
  27 with open(os.path.join(root, "README.rst"), encoding="utf-8") as f:
  28     long_description = f.read()
  29 
  30 setup(
  31     name=package_info["__title__"],
  32     version=package_info["__version__"],
  33     url=package_info["__uri__"],
  34     author=package_info["__author__"],
  35     description=package_info["__description__"],
  36     keywords=[
  37         "BotBuilderApplicationInsights",
  38         "bots",
  39         "ai",
  40         "botframework",
  41         "botbuilder",
  42     ],
  43     long_description=long_description,
  44     long_description_content_type="text/x-rst",
  45     license=package_info["__license__"],
  46     packages=[
  47         "botbuilder.applicationinsights",
  48         "botbuilder.applicationinsights.django",
  49         "botbuilder.applicationinsights.flask",
  50         "botbuilder.applicationinsights.processor",
  51     ],
  52     install_requires=REQUIRES + TESTS_REQUIRES,
  53     tests_require=TESTS_REQUIRES,
  54     include_package_data=True,
  55     classifiers=[
  56         "Programming Language :: Python :: 3.7",
  57         "Intended Audience :: Developers",
  58         "License :: OSI Approved :: MIT License",
  59         "Operating System :: OS Independent",
  60         "Development Status :: 5 - Production/Stable",
  61         "Topic :: Scientific/Engineering :: Artificial Intelligence",
  62     ],
  63 )
  64
  ```
  --- END FILES ---
  
  Please first localize the bug based on the issue statement, and then generate a patch according to the `git diff` format fenced by three backticks.
  
  Here is an example:
  
  ```diff
  diff --git a/examples/server_async.py b/examples/server_async.py
  --- a/examples/server_async.py
  +++ b/examples/server_async.py
  @@ -313,4 +313,4 @@
   
   
   if __name__ == "__main__":
  -    asyncio.run(run_async_server("."), debug=True)
  +    asyncio.run(run_async_server(), debug=True)
  diff --git a/examples/server_sync.py b/examples/server_sync.py
  --- a/examples/server_sync.py
  +++ b/examples/server_sync.py
  @@ -313,5 +313,5 @@
   
   
   if __name__ == "__main__":
  -    server = run_sync_server(".")
  +    server = run_sync_server()
       server.shutdown()
  
  ```
  
golden_diff: diff --git a/libraries/botbuilder-applicationinsights/setup.py b/libraries/botbuilder-applicationinsights/setup.py
  --- a/libraries/botbuilder-applicationinsights/setup.py
  +++ b/libraries/botbuilder-applicationinsights/setup.py
  @@ -12,7 +12,7 @@
   ]
   TESTS_REQUIRES = [
       "aiounittest==1.3.0",
  -    "django==2.2.6",  # For samples
  +    "django==2.2.10",  # For samples
       "djangorestframework==3.10.3",  # For samples
       "flask==1.1.1",  # For samples
   ]
  
verification_info: {"golden_diff": "diff --git a/libraries/botbuilder-applicationinsights/setup.py b/libraries/botbuilder-applicationinsights/setup.py\n--- a/libraries/botbuilder-applicationinsights/setup.py\n+++ b/libraries/botbuilder-applicationinsights/setup.py\n@@ -12,7 +12,7 @@\n ]\n TESTS_REQUIRES = [\n     \"aiounittest==1.3.0\",\n-    \"django==2.2.6\",  # For samples\n+    \"django==2.2.10\",  # For samples\n     \"djangorestframework==3.10.3\",  # For samples\n     \"flask==1.1.1\",  # For samples\n ]\n", "issue": "Django Component Governance vulnerability\nDjango 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data as a series of rows with a user-specified column delimiter). By passing a suitably crafted delimiter to a contrib.postgres.aggregates.StringAgg instance, it was possible to break escaping and inject malicious SQL.\r\n\r\nhttps://dev.azure.com/FuseLabs/SDK_v4/_componentGovernance/112465/alert/2370216?typeId=4354877\n", "before_files": [{"content": "# Copyright (c) Microsoft Corporation. All rights reserved.\n# Licensed under the MIT License.\n\nimport os\nfrom setuptools import setup\n\nREQUIRES = [\n    \"applicationinsights==0.11.9\",\n    \"botbuilder-schema==4.15.0\",\n    \"botframework-connector==4.15.0\",\n    \"botbuilder-core==4.15.0\",\n]\nTESTS_REQUIRES = [\n    \"aiounittest==1.3.0\",\n    \"django==2.2.6\",  # For samples\n    \"djangorestframework==3.10.3\",  # For samples\n    \"flask==1.1.1\",  # For samples\n]\n\nroot = os.path.abspath(os.path.dirname(__file__))\n\nwith open(os.path.join(root, \"botbuilder\", \"applicationinsights\", \"about.py\")) as f:\n    package_info = {}\n    info = f.read()\n    exec(info, package_info)\n\nwith open(os.path.join(root, \"README.rst\"), encoding=\"utf-8\") as f:\n    long_description = f.read()\n\nsetup(\n    name=package_info[\"__title__\"],\n    version=package_info[\"__version__\"],\n    url=package_info[\"__uri__\"],\n    author=package_info[\"__author__\"],\n    description=package_info[\"__description__\"],\n    keywords=[\n        \"BotBuilderApplicationInsights\",\n        \"bots\",\n        \"ai\",\n        \"botframework\",\n        \"botbuilder\",\n    ],\n    long_description=long_description,\n    long_description_content_type=\"text/x-rst\",\n    license=package_info[\"__license__\"],\n    packages=[\n        \"botbuilder.applicationinsights\",\n        \"botbuilder.applicationinsights.django\",\n        \"botbuilder.applicationinsights.flask\",\n        \"botbuilder.applicationinsights.processor\",\n    ],\n    install_requires=REQUIRES + TESTS_REQUIRES,\n    tests_require=TESTS_REQUIRES,\n    include_package_data=True,\n    classifiers=[\n        \"Programming Language :: Python :: 3.7\",\n        \"Intended Audience :: Developers\",\n        \"License :: OSI Approved :: MIT License\",\n        \"Operating System :: OS Independent\",\n        \"Development Status :: 5 - Production/Stable\",\n        \"Topic :: Scientific/Engineering :: Artificial Intelligence\",\n    ],\n)\n", "path": "libraries/botbuilder-applicationinsights/setup.py"}], "after_files": [{"content": "# Copyright (c) Microsoft Corporation. All rights reserved.\n# Licensed under the MIT License.\n\nimport os\nfrom setuptools import setup\n\nREQUIRES = [\n    \"applicationinsights==0.11.9\",\n    \"botbuilder-schema==4.15.0\",\n    \"botframework-connector==4.15.0\",\n    \"botbuilder-core==4.15.0\",\n]\nTESTS_REQUIRES = [\n    \"aiounittest==1.3.0\",\n    \"django==2.2.10\",  # For samples\n    \"djangorestframework==3.10.3\",  # For samples\n    \"flask==1.1.1\",  # For samples\n]\n\nroot = os.path.abspath(os.path.dirname(__file__))\n\nwith open(os.path.join(root, \"botbuilder\", \"applicationinsights\", \"about.py\")) as f:\n    package_info = {}\n    info = f.read()\n    exec(info, package_info)\n\nwith open(os.path.join(root, \"README.rst\"), encoding=\"utf-8\") as f:\n    long_description = f.read()\n\nsetup(\n    name=package_info[\"__title__\"],\n    version=package_info[\"__version__\"],\n    url=package_info[\"__uri__\"],\n    author=package_info[\"__author__\"],\n    description=package_info[\"__description__\"],\n    keywords=[\n        \"BotBuilderApplicationInsights\",\n        \"bots\",\n        \"ai\",\n        \"botframework\",\n        \"botbuilder\",\n    ],\n    long_description=long_description,\n    long_description_content_type=\"text/x-rst\",\n    license=package_info[\"__license__\"],\n    packages=[\n        \"botbuilder.applicationinsights\",\n        \"botbuilder.applicationinsights.django\",\n        \"botbuilder.applicationinsights.flask\",\n        \"botbuilder.applicationinsights.processor\",\n    ],\n    install_requires=REQUIRES + TESTS_REQUIRES,\n    tests_require=TESTS_REQUIRES,\n    include_package_data=True,\n    classifiers=[\n        \"Programming Language :: Python :: 3.7\",\n        \"Intended Audience :: Developers\",\n        \"License :: OSI Approved :: MIT License\",\n        \"Operating System :: OS Independent\",\n        \"Development Status :: 5 - Production/Stable\",\n        \"Topic :: Scientific/Engineering :: Artificial Intelligence\",\n    ],\n)\n", "path": "libraries/botbuilder-applicationinsights/setup.py"}]}