Escape string for MySQL

mysql_escape_string.js

const mysql_escape_string = str => str.replace(/[\0\x08\x09\x1a\n\r"'\\\%]/g, ch => {
    switch (ch) {
        case "\0": return "\\0";
        case "\x08": return "\\b";
        case "\x09": return "\\t";
        case "\x1a": return "\\z";
        case "\n": return "\\n";
        case "\r": return "\\r";
        case "\"":
        case "'":
        case "\\":
        case "%": return "\\" + ch; // prepend a backslash to double/single quotes, backslash and percent
    }
});