sanitize just the stacktrace (#5)

wanderlog · Jan 4, 2024 · ed12c6a · ed12c6a
1 parent b9c66cb
commit ed12c6a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/index.js b/index.js
@@ -50,7 +50,7 @@ exports.wrapSequelize = (sequelize) => {
         // Allow only alphanumeric, periods, slashes, dashes, underscores,
         // spaces, newlines. The main concern is preventing injection of '*/
         // within the stacktrace.
-        const commentStr = `stacktrace='${makeMinimalUsefulStacktrace()}'`.replace(/[^\w.:/\\\-\s\n]/g, '');
+        const commentStr = `stacktrace='${makeMinimalUsefulStacktrace().replace(/[^\w.:/\\\-\s\n]/g, '')}'`;
 
         if (commentStr && commentStr.length > 0)
             sql = `${sql} /*${commentStr}*/`;