Fix code scanning alert #1: Incomplete string escaping or encoding (#14)

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
charsleysa · Sep 20, 2024 · 84fa1ec · 84fa1ec
1 parent 75cf50b
commit 84fa1ec
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/dialect/mssql.ts b/lib/dialect/mssql.ts
@@ -202,7 +202,7 @@ export class Mssql extends Dialect<{ questionMarkParameterPlaceholder?: boolean
         createResult.push(`(${colNodes.map(this.visit.bind(this)).join(', ')})`);
         this.visitingCreate = false;
         let tableStr = tableResult.join(' ');
-        tableStr = tableStr.replace("'", "''");
+        tableStr = tableStr.replace(/'/g, "''");
         tableStr = `'${tableStr.substring(1, tableStr.length - 1)}'`;
         const whereClause = `WHERE TABLE_NAME = ${tableStr}`;
         // TODO: need to add schema check, sudo code: