nodejs
diff --git a/Collapse file
‎doc/api/sqlite.md‎
Copy file name to clipboardExpand all lines: doc/api/sqlite.md
+4-1Lines changed: 4 additions & 1 deletion
Display the source diff
Display the rich diff b/Collapse file
‎doc/api/sqlite.md‎
Copy file name to clipboardExpand all lines: doc/api/sqlite.md
+4-1Lines changed: 4 additions & 1 deletion
Display the source diff
Display the rich diff
diff --git a/Collapse file
‎src/node_sqlite.h‎
Copy file name to clipboardExpand all lines: src/node_sqlite.h
+1-1Lines changed: 1 addition & 1 deletion b/Collapse file
‎src/node_sqlite.h‎
Copy file name to clipboardExpand all lines: src/node_sqlite.h
+1-1Lines changed: 1 addition & 1 deletion
diff --git a/Collapse file
‎test/parallel/test-sqlite-config.js‎
Copy file name to clipboardExpand all lines: test/parallel/test-sqlite-config.js
+10-3Lines changed: 10 additions & 3 deletions b/Collapse file
‎test/parallel/test-sqlite-config.js‎
Copy file name to clipboardExpand all lines: test/parallel/test-sqlite-config.js
+10-3Lines changed: 10 additions & 3 deletions
@@ -104,6 +104,9 @@ exposed by this class execute synchronously.
 <!-- YAML
 added: v22.5.0
 changes:
+  - version: REPLACEME
+    pr-url: https://github.com/nodejs/node/pull/61266
+    description: Enable `defensive` by default.
   - version:
       - v25.1.0
     pr-url: https://github.com/nodejs/node/pull/60217
@@ -153,7 +156,7 @@ changes:
   * `defensive` {boolean} If `true`, enables the defensive flag. When the defensive flag is enabled,
     language features that allow ordinary SQL to deliberately corrupt the database file are disabled.
     The defensive flag can also be set using `enableDefensive()`.
-    **Default:** `false`.
+    **Default:** `true`.
 
 Constructs a new `DatabaseSync` instance.
 
 
@@ -79,7 +79,7 @@ class DatabaseOpenConfiguration {
   bool return_arrays_ = false;
   bool allow_bare_named_params_ = true;
   bool allow_unknown_named_params_ = false;
-  bool defensive_ = false;
+  bool defensive_ = true;
 };
 
 class DatabaseSync;
 
@@ -20,9 +20,9 @@ function checkDefensiveMode(db) {
   }
 }
 
-test('by default, defensive mode is off', (t) => {
+test('by default, defensive mode is on', (t) => {
   const db = new DatabaseSync(':memory:');
-  t.assert.strictEqual(checkDefensiveMode(db), false);
+  t.assert.strictEqual(checkDefensiveMode(db), true);
 });
 
 test('when passing { defensive: true } as config, defensive mode is on', (t) => {
@@ -32,13 +32,20 @@ test('when passing { defensive: true } as config, defensive mode is on', (t) =>
   t.assert.strictEqual(checkDefensiveMode(db), true);
 });
 
+test('when passing { defensive: false } as config, defensive mode is off', (t) => {
+  const db = new DatabaseSync(':memory:', {
+    defensive: false
+  });
+  t.assert.strictEqual(checkDefensiveMode(db), false);
+});
+
 test('defensive mode on after calling db.enableDefensive(true)', (t) => {
   const db = new DatabaseSync(':memory:');
   db.enableDefensive(true);
   t.assert.strictEqual(checkDefensiveMode(db), true);
 });
 
-test('defensive mode should be off after calling db.enableDefensive(false)', (t) => {
+test('defensive mode off after calling db.enableDefensive(false)', (t) => {
   const db = new DatabaseSync(':memory:', {
     defensive: true
   });