Commit Graph
11 Commits
Author SHA1 Message Date
tbenandClaude Opus 5.5 b81b09324a Fix SQL injection, query value handling, and other security issues
- Quote all identifiers and validate operators, order strategies, join
  types, raw comparisons, and limit/offset/page in the query generator
- Treat 0 as a real query value; stop null from leaving unbound
  placeholders
- Return the WHERE clause and its values separately from sqlGenerator so
  delete/update no longer regex-parse generated SQL
- update(): target matched row ids, re-fetch reliably, and return
  success: false when no rows match
- Fix duplicated aliases, [object Object] select fields, AVERAGE -> AVG,
  escape GROUP_CONCAT separators
- Fix OFFSET without LIMIT and OFFSET on count queries
- Store boolean false as 0 on insert; call function values once
- Verify TLS certificates by default (new ssl_reject_unauthorized option)
- Confirm before importing an executable schema from an archive (--yes)
- Skip symlinks when reading extracted zip archives
- Only trim files matching the backup/export naming pattern
- Tighten default HTML sanitizer (no style/id attributes, no button)
- Stop typedef generation from mutating parent table schemas
- Pass config through DbSQL; handle BigInt values in results

Co-Authored-By: Claude Opus 5.5 <[email protected]>
2026-10-14 02:10:35 +01:00
tben e8f630ae98 Bugfix: error handling in db-update function 2026-08-09 07:34:14 +01:00
tben b8e9ab07f2 Update targetId type to number 2026-08-08 16:39:00 +01:00
tben 44ec3d4c11 Update db-update function #2 2026-08-08 16:35:23 +01:00
tben 90fcd3867d Update db-update function 2026-08-08 16:33:37 +01:00
tben 4d85a69505 Bugfix: fix db-update return 2026-08-06 13:42:18 +01:00
tben 79c5b896fe Grok 5 updates 2026-07-14 08:33:44 +01:00
tben 3b5fba4063 Updates 2026-07-14 08:12:13 +01:00
tben b5e4724e03 First working version. 2026-06-24 17:00:14 +01:00
tben eb86e1803d First version without typescript errors 2026-06-21 07:05:49 +01:00
tben 9c8f6e20aa First Commit. Based off bun-sqlite 2026-06-21 06:18:34 +01:00