@mikro-orm/sql 7.0.14-dev.9 → 7.0.15-dev.0

package/AbstractSqlPlatform.d.ts

@@ -30,7 +30,8 @@ export declare abstract class AbstractSqlPlatform extends Platform {
     getSearchJsonPropertyKey(path: string[], type: string, aliased: boolean, value?: unknown): string | RawQueryFragment;
     /**
      * Quotes a key for use inside a JSON path expression (e.g. `$.key`).
-     * Simple alphanumeric keys are left unquoted; others are wrapped in double quotes.
+     * Simple alphanumeric keys are left unquoted; others are wrapped in double quotes
+     * with embedded `\` and `"` escaped per the JSON path string syntax.
      * @internal
      */
     quoteJsonKey(key: string): string;

package/AbstractSqlPlatform.js

@@ -66,18 +66,23 @@ export class AbstractSqlPlatform extends Platform {
     }
     getSearchJsonPropertyKey(path, type, aliased, value) {
         const [a, ...b] = path;
+        const jsonPath = this.quoteValue(`$.${b.map(this.quoteJsonKey).join('.')}`);
         if (aliased) {
-            return raw(alias => `json_extract(${this.quoteIdentifier(`${alias}.${a}`)}, '$.${b.map(this.quoteJsonKey).join('.')}')`);
+            return raw(alias => `json_extract(${this.quoteIdentifier(`${alias}.${a}`)}, ${jsonPath})`);
         }
-        return raw(`json_extract(${this.quoteIdentifier(a)}, '$.${b.map(this.quoteJsonKey).join('.')}')`);
+        return raw(`json_extract(${this.quoteIdentifier(a)}, ${jsonPath})`);
     }
     /**
      * Quotes a key for use inside a JSON path expression (e.g. `$.key`).
-     * Simple alphanumeric keys are left unquoted; others are wrapped in double quotes.
+     * Simple alphanumeric keys are left unquoted; others are wrapped in double quotes
+     * with embedded `\` and `"` escaped per the JSON path string syntax.
      * @internal
      */
     quoteJsonKey(key) {
-        return /^[a-z]\w*$/i.exec(key) ? key : `"${key}"`;
+        if (/^[a-z]\w*$/i.test(key)) {
+            return key;
+        }
+        return `"${key.replaceAll('\\', '\\\\').replaceAll('"', '\\"')}"`;
     }
     getJsonIndexDefinition(index) {
         return index.columnNames.map(column => {

package/dialects/postgresql/BasePostgreSqlPlatform.js

@@ -243,9 +243,9 @@ export class BasePostgreSqlPlatform extends AbstractSqlPlatform {
             lastOperator = '->';
         }
         if (path.length === 0) {
-            return cast(`${root}${lastOperator}'${last}'`);
+            return cast(`${root}${lastOperator}${this.quoteValue(last)}`);
         }
-        return cast(`${root}->${path.map(a => this.quoteValue(a)).join('->')}${lastOperator}'${last}'`);
+        return cast(`${root}->${path.map(a => this.quoteValue(a)).join('->')}${lastOperator}${this.quoteValue(last)}`);
     }
     getJsonIndexDefinition(index) {
         return index.columnNames.map(column => {
@@ -265,7 +265,8 @@ export class BasePostgreSqlPlatform extends AbstractSqlPlatform {
         if (RawQueryFragment.isKnownFragment(id)) {
             return super.quoteIdentifier(id);
         }
-        return `${quote}${id.toString().replace('.', `${quote}.${quote}`)}${quote}`;
+        const escaped = id.toString().replaceAll(quote, quote + quote);
+        return `${quote}${escaped.replace('.', `${quote}.${quote}`)}${quote}`;
     }
     pad(number, digits) {
         return String(number).padStart(digits, '0');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mikro-orm/sql",
-  "version": "7.0.14-dev.9",
+  "version": "7.0.15-dev.0",
   "description": "TypeScript ORM for Node.js based on Data Mapper, Unit of Work and Identity Map patterns. Supports MongoDB, MySQL, PostgreSQL and SQLite databases as well as usage with vanilla JavaScript.",
   "keywords": [
     "data-mapper",
@@ -47,13 +47,13 @@
     "copy": "node ../../scripts/copy.mjs"
   },
   "dependencies": {
-    "kysely": "0.28.16"
+    "kysely": "0.28.17"
   },
   "devDependencies": {
-    "@mikro-orm/core": "^7.0.13"
+    "@mikro-orm/core": "^7.0.14"
   },
   "peerDependencies": {
-    "@mikro-orm/core": "7.0.14-dev.9"
+    "@mikro-orm/core": "7.0.15-dev.0"
   },
   "engines": {
     "node": ">= 22.17.0"