From 4d7769de563f004b18ecf922a2492e2af5094e67 Mon Sep 17 00:00:00 2001 From: garrettmills Date: Sat, 9 Jul 2022 11:42:02 -0500 Subject: [PATCH] Fix PostgreSQLDialect escaping of single quotes --- package.json | 2 +- src/orm/dialect/PostgreSQLDialect.ts | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/package.json b/package.json index cc43621..9b810f6 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "@extollo/lib", - "version": "0.10.4", + "version": "0.10.5", "description": "The framework library that lifts up your code.", "main": "lib/index.js", "types": "lib/index.d.ts", diff --git a/src/orm/dialect/PostgreSQLDialect.ts b/src/orm/dialect/PostgreSQLDialect.ts index 70c54e2..911387b 100644 --- a/src/orm/dialect/PostgreSQLDialect.ts +++ b/src/orm/dialect/PostgreSQLDialect.ts @@ -39,7 +39,7 @@ export class PostgreSQLDialect extends SQLDialect { } else if ( value === null || typeof value === 'undefined' ) { return new QuerySafeValue(value, 'NULL') } else { - const escaped = value.replace(/'/g, '\\\'') // .replace(/"/g, '\\"').replace(/`/g, '\\`') + const escaped = value.replace(/'/g, '\'\'') // .replace(/"/g, '\\"').replace(/`/g, '\\`') return new QuerySafeValue(value, `'${escaped}'`) } }