[WV-2626] Create button in candidate, politician page to call trigram index creation function [WV-2619] Create utility script to add trigram index to database without creating migration files [ Team Review]

[pravingv]

**What github.com/wevote server/issues does this fix?
WV-2626 Create button in candidate, politician page to call trigram index creation function
WV-2619 Create utility script to add trigram index to database without creating migration files

Changes included this pull request?**
WV-2626 Creates link in candidate, politician page to call trigram index creation function
Created a link in candidate, politician page to call trigram index creation function with drop down list of fields for which trigram index to be added. After running utility script the webpage shows status of index with table and index name.

WV-2619 utility script to add trigram index
wevote_functions/create_trigram_index.py
Created a new utility script to add a GiST-based trigram index to a specified column in the WeVote server database table. The script runs independently and can also be imported for use within other application views.

[mjacquot1]

revert back to {% csrf_token %}

[mjacquot1]

While I see you added safeguards to sanitize the variables, executing raw SQL strings is still very risky. Execute this as sub-process commands like this to prevent sql injection:

WeVoteServer/retrieve_tables/controllers_master.py

Line 343 in fc4313a

result = subprocess.run(command_args, capture_output=True) # , shell=False

[mjacquot1]

Address my comments and I'd say this is good for now.

[pravingv]

Updated utility function to handle dynamic table and column names in Django/PostgreSQL is to use the psycopg2.sql . This securely quotes and escapes identifiers (table names, column names, index names) directly within the database driver, completely neutralizing injection risks without needing to spawn an external subprocess