Major version update. Major bugfixes. Security vulnerabilites fixed

dist/utils/sql-generator-grab-concat-str.js

@@ -1,13 +1,14 @@
+import { sqlField, sqlIdent, sqlStringLiteral } from "./sql-safe";
 export default function sqlGenGrabConcatStr({ alias, field, separator = ",", distinct, }) {
     let gc = `GROUP_CONCAT(`;
     if (distinct) {
         gc += `DISTINCT `;
     }
-    gc += `${field}`;
+    gc += sqlField(field);
     if (!distinct) {
-        gc += `, '${separator}'`;
+        gc += `, ${sqlStringLiteral(String(separator))}`;
     }
     gc += `)`;
-    gc += ` AS ${alias}`;
+    gc += ` AS ${sqlIdent(alias, "alias")}`;
     return gc;
 }