Escape single quotes by doubling them up.

2020-09-15 14:03:41 -07:00 · 2020-09-15 14:03:41 -07:00 · dcf84dedf8
parent a2337346fb
commit dcf84dedf8
1 changed files with 1 additions and 0 deletions
--- a/voussoirkit/sqlhelpers.py
+++ b/voussoirkit/sqlhelpers.py
@ -145,6 +145,7 @@ def literal(item):
        return f'{item:f}'

    elif isinstance(item, str):
+        item = item.replace("'", "''")
        return f"'{item}'"

    elif isinstance(item, bytes):