CVE-2019-10757: SQL Injection in knex

The vulnerability stems from improper identifier escaping in the MSSQL dialect. The key change in commit 988fb24 modifies the wrapIdentifierImpl method in the MSSQL client implementation. The patch replaces the original insufficient escaping regex with one that strips out []' characters, directly addressing the SQL injection vector. This function is responsible for wrapping column/table identifiers in square brackets during query construction, making it the primary vulnerable function that would process malicious input during exploitation. Other changes in the commit appear to be test additions or unrelated code style fixes.