server: use ParseWithParams to avoid injection (#22545)
server: use ParseWithParams to avoid injection (#22545)

 
kyle-wang/tidb,coocood/tidb,ngaut/tidb,pingcap/tidb,ngaut/tidb,coocood/tidb,kyle-wang/tidb,kyle-wang/tidb,ngaut/tidb,c4pt0r/tidb,pingcap/tidb,c4pt0r/tidb,ngaut/tidb,kyle-wang/tidb,pingcap/tidb,ngaut/tidb,kyle-wang/tidb,pingcap/tidb,c4pt0r/tidb,pingcap/tidb,ngaut/tidb,kyle-wang/tidb,pingcap/tidb,c4pt0r/tidb,c4pt0r/tidb,c4pt0r/tidb