badmfck-api-server 4.0.88 → 4.0.90

package/dist/apiServer/DBService.d.ts

@@ -127,7 +127,7 @@ export declare class DBService extends BaseService {
     adapter: IDBAdapter | null;
     constructor(options: IDBSericeOptions);
     init(): Promise<void>;
-    static escape(id: string, value: string): string;
+    static escape(id: string, value: any): string;
     getAdapter(dbid?: string | null): IDBAdapter | IDBError;
     reportQuery(result: IDBResult, req: IDBQuery): Promise<void>;
     finishService(): Promise<void>;

package/dist/apiServer/DBService.js

@@ -242,8 +242,27 @@ class DBService extends BaseService_1.BaseService {
     }
     static escape(id, value) {
         const adapter = DBService.allInstances.find(i => i.options.id === id)?.adapter;
-        if (!adapter || "errno" in adapter)
-            return value;
+        if (!adapter || "errno" in adapter) {
+            if (value === null || value === undefined)
+                return 'NULL';
+            const stringValue = typeof value === 'object' ? JSON.stringify(value) : String(value);
+            return "'" + stringValue.replace(/[\0\x08\x09\x1a\n\r"'\\\%]/g, (char) => {
+                switch (char) {
+                    case "\0": return "\\0";
+                    case "\x08": return "\\b";
+                    case "\x09": return "\\t";
+                    case "\x1a": return "\\z";
+                    case "\n": return "\\n";
+                    case "\r": return "\\r";
+                    case "\"":
+                    case "'":
+                    case "\\":
+                    case "%":
+                        return "\\" + char;
+                    default: return char;
+                }
+            }) + "'";
+        }
         return adapter.escape(value);
     }
     getAdapter(dbid) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "badmfck-api-server",
-  "version": "4.0.88",
+  "version": "4.0.90",
   "description": "Simple API http server based on express",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",