Function quote_string_literal

nodedb-client/src/sql_escape/literal.rs:12–15

SQL string-literal escaping. Render a `&str` as a SQL string literal: single-quote-doubled and wrapped in single quotes. Matches `standard_conforming_strings=on` behavior (PG 9.1+ default), the only mode the server runs in. Centralizes the escape so call sites can't drift into raw `format!`s without going through it — every `'foo'` written into a SQL string inside this crate goes through here.

(s: &str)

/// without going through it — every `'foo'` written into a SQL string
/// inside this crate goes through here.
pub(crate) fn quote_string_literal(s: &str) -> String {
    let escaped = s.replace('\'', "''");
    format!("'{escaped}'")
}

#[cfg(test)]
mod tests {