Closed phibr0 closed 4 months ago
Kysely does no such thing https://kyse.link/whZiN
Kysely sends all user input as parameters. It's up to the underlying driver to handle how they are sent over the wire. I find it hard to believe that mysql2 would do that either though.
It seems like kysely converts numbers to strings simply by calling
.toString()
. This breaks for numbers larger than one million, because those numbers are converted to scientific notation:Example
4,000,000
gets converted to4e+06
which is $4\times 10^6$.