Grok 5 updates

src/lib/mariadb/db-update.ts

@@ -7,6 +7,7 @@ import type {
     ServerQueryParam,
 } from "../../types";
 import sqlGenerator from "../../utils/sql-generator";
+import sanitizeHtmlFields from "../../utils/sanitize-html-fields";
 
 type Params<
     Schema extends { [k: string]: any } = { [k: string]: any },
@@ -69,9 +70,15 @@ export default async function DbUpdate<
         let sql = ``;
         sql += `UPDATE ${quoteIdentifier(table)} SET`;
 
+        const sanitizedData = sanitizeHtmlFields({
+            table,
+            data,
+            config,
+        });
+
         const finalData: { [k: string]: SQLInsertGenValueType } = {
             updated_at: Date.now(),
-            ...data,
+            ...sanitizedData,
         };
 
         const keys = Object.keys(finalData);