ES-QU-EL

yarn add @cd2/es-qu-el

Sanitizing using the SQL function

The SQL function will automatically escape any interpolated into the string.

1import { SQL } from "@cd2/es-qu-el"
2
3const userInput = `dangerous user input ' OR true; `
4
5const sql = SQL`SELECT * FROM table WHERE thing=${userInput}`

A function can be interpolated which will get access to an object with many sanitizers:

1const table = `my_table`
2
3const sql = SQL`SELECT * FROM ${as => as.name(table)}`