From a14f06f53373d1df72837a50249c86ea3ab33160 Mon Sep 17 00:00:00 2001
From: Daniel Hensby <daniel.hensby@bidbax.no>
Date: Thu, 16 Mar 2023 11:12:55 +0000
Subject: [PATCH] :bug: quote sqlv8 values

---
 CHANGELOG.txt                      | 6 +++++-
 lib/msnodesqlv8/connection-pool.js | 3 ++-
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.txt b/CHANGELOG.txt
index 27cf725f..2a9fd6a4 100644
--- a/CHANGELOG.txt
+++ b/CHANGELOG.txt
@@ -1,4 +1,8 @@
-v9.1.1 (2023-01-??)
+v9.1.2 (2023-??-??)
+-------------------
+[fix] Escape values that are added to the msnodesqlv8 connection string that we construct ((#1479)[https://github.com/tediousjs/node-mssql/pull/1479])
+
+v9.1.1 (2023-01-18)
 -------------------
 [revert] Add support for AAD authentication via connection string ((#1436)[https://github.com/tediousjs/node-mssql/pull/1436])
 
diff --git a/lib/msnodesqlv8/connection-pool.js b/lib/msnodesqlv8/connection-pool.js
index c2b5ae5d..4d173bef 100644
--- a/lib/msnodesqlv8/connection-pool.js
+++ b/lib/msnodesqlv8/connection-pool.js
@@ -39,7 +39,8 @@ class ConnectionPool extends BaseConnectionPool {
           case 'encrypt':
             return this.config.options.encrypt ? 'Yes' : 'No'
           default:
-            return this.config[key] != null ? this.config[key] : ''
+            // quote values in `{}` and escape any existing `}` chars
+            return `{${this.config[key] ? this.config[key].toString().replace(/}/g, '}}') : ''}}`
         }
       })