fix: literalToSQL should use replaceAll, not just replace to escape q…

…uotes (uwdata#660)
cmudig · Jan 28, 2025 · 9450349 · 9450349
1 parent 3e0577a
commit 9450349
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/sql/src/ast/literal.js b/packages/sql/src/ast/literal.js
@@ -30,7 +30,7 @@ export function literalToSQL(value) {
     case 'number':
       return Number.isFinite(value) ? `${value}` : 'NULL';
     case 'string':
-      return `'${value.replace(`'`, `''`)}'`;
+      return `'${value.replaceAll(`'`, `''`)}'`;
     case 'boolean':
       return value ? 'TRUE' : 'FALSE';
     default: