fix: sanitize column name & unsanitize raw query

2 years ago · e20a2dcf83
1 changed files with 1 additions and 1 deletions
--- a/packages/nocodb/src/lib/db/sql-data-mapper/lib/sql/BaseModelSqlv2.ts
+++ b/packages/nocodb/src/lib/db/sql-data-mapper/lib/sql/BaseModelSqlv2.ts
@ -311,7 +311,7 @@ class BaseModelSqlv2 {
      );
    }

-    qb.count(this.model.primaryKey?.column_name || '*', {
+    qb.count(sanitize(this.model.primaryKey?.column_name) || '*', {
      as: 'count'
    }).first();
    const res = (await this.dbDriver.raw(unsanitize(qb.toQuery()))) as any;