Skip to content

v0.0.3

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Jul 11:14
· 22 commits to main since this release
v0.0.3
ccb648b

🐛 Fixed

  • String values are escaped before being placed into SQL. BaseSerializer and PostgresSerializer double single quotes (SQL standard); PostgresSerializer switches to the E'...' escape syntax for backslashes and control characters and rejects NUL; ClickhouseSerializer uses backslash escapes for quotes, backslashes and control characters. Previously a quote inside a value broke the query and opened the door to injection.

Full Changelog: v0.0.2...v0.0.3

Assets 8
Loading