Skip to content

@dwtechs/antity v0.18.0

Choose a tag to compare

@LCluber LCluber released this 29 May 12:53
· 24 commits to main since this release
  • Update dependencies:
    • "@dwtechs/antity": "0.18.0"
  • Security: fix SQL injection via identifier manipulation in quoteIfUppercase() — internal double-quote characters are now escaped by doubling them (" → "") before wrapping in double quotes
  • Security: sortField is now validated against the entity's known properties in both the get() middleware and query.select() before use in ORDER BY; an unrecognised field is silently dropped to prevent arbitrary column names reaching the query
  • Performance: replace string concatenation in loops with array + join() in Insert.query(), Update.query(), and Upsert.query() for faster bulk query generation