fix(jdbc): escape table type values in getTables metadata query

Author: dxbjavid

src/main/java/org/sqlite/jdbc3/JDBC3DatabaseMetaData.java

@@ -1740,7 +1740,7 @@ public synchronized ResultSet getTables(
             sql.append(" AND TABLE_TYPE IN (");
             sql.append(
                     Arrays.stream(types)
-                            .map((t) -> "'" + t.toUpperCase() + "'")
+                            .map((t) -> "'" + escape(t.toUpperCase()) + "'")
                             .collect(Collectors.joining(",")));
             sql.append(")");
         }

src/test/java/org/sqlite/DBMetaDataTest.java

@@ -477,6 +477,15 @@ public void getColumns() throws SQLException {
         assertThat(rs.getString("COLUMN_NAME")).isEqualTo("sql");
     }
 
+    @Test
+    public void getTablesTypeWithQuote() throws SQLException {
+        // a type containing a single quote must be treated as a literal, not break out of the
+        // TABLE_TYPE IN (...) list; 'X' matches nothing so the result must be empty
+        try (ResultSet rs = meta.getTables(null, null, null, new String[] {"X') OR ('1'='1"})) {
+            assertThat(rs.next()).isFalse();
+        }
+    }
+
     @Test
     public void getColumnsTableNameWithQuote() throws SQLException {
         stat.executeUpdate("create table \"o'brien\" (id integer, name text)");