You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Security: fix SQL injection via identifier manipulation in quoteIfUppercase() — internal double-quote characters are now escaped by doubling them (" → "") before wrapping in double quotes
Security: sortField is now validated against the entity's known properties in both the get() middleware and query.select() before use in ORDER BY; an unrecognised field is silently dropped to prevent arbitrary column names reaching the query
Performance: replace string concatenation in loops with array + join() in Insert.query(), Update.query(), and Upsert.query() for faster bulk query generation