fix high severity vulnerabilities by using my fork sqlite3 package

This commit is contained in:
LouisLam 2021-08-06 19:09:00 +08:00
parent d3e24df225
commit a40816b948
2 changed files with 20 additions and 3 deletions

View file

@ -4,6 +4,7 @@ const { R } = require("redbean-node");
const { const {
setSetting, setting, setSetting, setting,
} = require("./util-server"); } = require("./util-server");
const knex = require("knex");
class Database { class Database {
@ -12,6 +13,24 @@ class Database {
static latestVersion = 5; static latestVersion = 5;
static noReject = true; static noReject = true;
static connect() {
const Dialect = require("knex/lib/dialects/sqlite3/index.js");
Dialect.prototype._driver = () => require("@louislam/sqlite3");
R.setup(knex({
client: Dialect,
connection: {
filename: Database.path,
},
useNullAsDefault: true,
pool: {
min: 1,
max: 1,
idleTimeoutMillis: 30000,
}
}));
}
static async patch() { static async patch() {
let version = parseInt(await setting("database_version")); let version = parseInt(await setting("database_version"));

View file

@ -649,9 +649,7 @@ async function initDatabase() {
} }
console.log("Connecting to Database") console.log("Connecting to Database")
R.setup("sqlite", { Database.connect();
filename: Database.path,
});
console.log("Connected") console.log("Connected")
// Patch the database // Patch the database