From ad9bf56cfd30567cef9856de81013235a6053576 Mon Sep 17 00:00:00 2001 From: Pelle Wessman Date: Wed, 21 Aug 2019 23:20:02 +0200 Subject: [PATCH] Update CHANGELOG --- CHANGELOG.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/CHANGELOG.md b/CHANGELOG.md index 1d35632..492d9b3 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,10 @@ # Changelog +## 6.0.1 (2019-08-21) + +* Very minor security fix: `schemaName` and `tableName` wasn't escaped. If any of the two contained a string with a double quote in it, then that would enable an SQL injection. This was previously a feature of `tableName`, before the introduction of a separate `schemaName`, as that allowed a schema to be defined as part of `tableName`. Defining schema name through `tableName` is still supported after this fix, but is now *deprecated*. +* Fix: Errors wasn't propagated properly. Fixed in #150. Thanks @bobnil! + ## 6.0.0 (2019-07-28) * Breaking change: Now requires at least Node.js 10.x, this as Node.js 8.x [only have a short time left in its LTS](https://github.com/nodejs/Release)