CQL injection in asyncValidateField.js

PSA: Stripes runs in the browser. CQL is executed on the server. There can NEVER be a CQL injection vulnerability in Stripes because Stripes does not execute CQL code. Repeat after me: There can NEVER be a CQL injection vulnerability in Stripes because Stripes does not execute CQL code.

Stripes may send invalid queries to the server, and this looks like an instance of that, and we should clean it up, but that's just a bug and that's all there is to it. There is NO security implication here. If the module that receives this API request and parses this query barfs up a stacktrace rather than detecting the malformed query and throwing a polite exception**, that's a vulnerability in the receiving module. But please note that even if we fix the malformed query here, any other client in the world whether it's curl or Postman or Insomnia or some crazy scriptkiddie typing raw characters straight into HTTP request in telnet, is still free to send the same malformed query to the same module and the onus will still be on that module to deal with it.

** For the record, it looks like the receiving module does exactly the right thing and throws an exception. In summary, there is no security vulnerability here. There is no security vulnerability there. There is no security vulnerability anywhere.