remote/datasette
1
0
Fork 0
mirror of https://github.com/simonw/datasette.git synced 2026-09-19 23:14:06 +02:00
Code Issues Projects Releases Packages Wiki Activity

escape_sqlite() favors double quotes, closes #2795

Browse source
This commit is contained in:
Simon Willison 2026-06-23 14:04:20 -07:00
commit 22ccd8a087
2 changed files with 24 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

7
datasette/utils/__init__.py
View file

@ -410,12 +410,7 @@ def escape_css_string(s):
def escape_sqlite(s):
if _boring_keyword_re.match(s) and (s.lower() not in reserved_words):
return s
elif "]" in s:
# SQLite does not support escaping ] inside [bracket] quoting, so fall
# back to double-quote quoting (doubling any embedded ") - #2677
return '"{}"'.format(s.replace('"', '""'))
else:
return f"[{s}]"
return '"{}"'.format(s.replace('"', '""'))
def make_dockerfile(