Bad query builder

[sm2017]

The following code

var squel = require("squel")

squel.insert()
        .into("students")
        .set("name", "Tho'mas")
        .toString()

Will create wrong query

INSERT INTO students (name) VALUES ('Tho'mas')

So here not only we have bad query but also possible SQL injection attack

[sm2017]

Can you help please?

[bryanjhv]

You can use sqlstring module, like this:

import * as squel from 'squel'
import { escape } from 'sqlstring'

squel.registerValueHandler('string', (s) => escape(s))