Sequelize/packages/core/test/integration/vectors.test.js

'use strict';

const chai = require('chai');

const expect = chai.expect;
const { DataTypes } = require('@sequelize/core');
const Support = require('./support');

chai.should();

describe(Support.getTestDialectTeaser('Vectors'), () => {
  it('should not allow insert backslash', async function () {
    const Student = this.sequelize.define(
      'student',
      {
        name: DataTypes.STRING,
      },
      {
        tableName: 'student',
      },
    );

    await Student.sync({ force: true });

    const result0 = await Student.create({
      name: 'Robert\\\'); DROP TABLE "students"; --',
    });

    expect(result0.get('name')).to.equal('Robert\\\'); DROP TABLE "students"; --');
    const result = await Student.findAll();
    expect(result[0].name).to.equal('Robert\\\'); DROP TABLE "students"; --');
  });
});