Commit Graph
8 Commits
Author SHA1 Message Date
tbenandClaude Opus 5.5 b81b09324a Fix SQL injection, query value handling, and other security issues
- Quote all identifiers and validate operators, order strategies, join
  types, raw comparisons, and limit/offset/page in the query generator
- Treat 0 as a real query value; stop null from leaving unbound
  placeholders
- Return the WHERE clause and its values separately from sqlGenerator so
  delete/update no longer regex-parse generated SQL
- update(): target matched row ids, re-fetch reliably, and return
  success: false when no rows match
- Fix duplicated aliases, [object Object] select fields, AVERAGE -> AVG,
  escape GROUP_CONCAT separators
- Fix OFFSET without LIMIT and OFFSET on count queries
- Store boolean false as 0 on insert; call function values once
- Verify TLS certificates by default (new ssl_reject_unauthorized option)
- Confirm before importing an executable schema from an archive (--yes)
- Skip symlinks when reading extracted zip archives
- Only trim files matching the backup/export naming pattern
- Tighten default HTML sanitizer (no style/id attributes, no button)
- Stop typedef generation from mutating parent table schemas
- Pass config through DbSQL; handle BigInt values in results

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-14 02:10:35 +01:00
tben 155263a79f Fix bugs, improve schema gen 2026-10-14 01:47:55 +01:00
tben c97bedc271 Update vector columns logic 2026-08-05 13:28:57 +01:00
tben 4f203ce4e7 Remove table.isVector feature altogether. All vector features are handled per column 2026-08-05 11:01:58 +01:00
tben c40d8596c7 Change 'integerLength' in schema to 'dataLength' 2026-08-05 09:47:22 +01:00
tben 225e3eba4c Updates 2026-07-14 09:34:10 +01:00
tben 56462e6cc2 updates 2026-07-14 09:10:30 +01:00
tben 9c8f6e20aa First Commit. Based off bun-sqlite 2026-06-21 06:18:34 +01:00