mirror of
https://github.com/simonw/datasette.git
synced 2026-09-19 23:14:06 +02:00
bf3e277c98named_parameters stripped SQL comments before string literals in
separate passes. A string literal such as '-- TODO' would be treated
as the start of a line comment, swallowing the rest of the line and
hiding any named parameters that followed it. For example:
select * from t where note = '-- TODO' and id = :id
returned [] instead of ['id'], so the query parameter input form
would be missing the :id field.
Match comments and string literals in a single left-to-right pass so
that whichever construct starts first wins, matching how SQL is
actually tokenized.
Co-authored-by: JSap0914 <JSap0914@users.noreply.github.com>
|
||
|---|---|---|
| .. | ||
| __init__.py | ||
| actions_sql.py | ||
| asgi.py | ||
| baseconv.py | ||
| check_callable.py | ||
| internal_db.py | ||
| multipart.py | ||
| permissions.py | ||
| shutil_backport.py | ||
| sql_analysis.py | ||
| sqlite.py | ||
| testing.py | ||