Fix sqlite vulnerable to code execution due to Object coercion

[imhunterand]

Overview
Affected versions of this project SiliconLabs/zap are vulnerable to Arbitrary Code Execution via the .ToString() method due to improper sanitization. Exploiting this vulnerability is possible when a binding parameter is a crafted Object and might result in arbitrary JavaScript code execution or DoS. Ensure sufficient sanitization in the parent application to protect against invalid values being supplied to binding parameters.

    }
    else if (source.IsObject()) {
        Napi::String napiVal = source.ToString();
        // Check whether toString returned a value that is not undefined.
        if(napiVal.Type() == 0) {
            return NULL;

   it('should ignore faulty toString in array', function(done) {
       const faulty = [[{toString: null}], 1];
       db.all('SELECT * FROM txt_table WHERE txt = ? LIMIT ?', faulty, function (err) {
           assert.equal(err, null);
           done();
       });
   });

   it('should ignore faulty toString set to function', function(done) {
       const faulty = [[{toString: function () {console.log('oh no');}}], 1];
       db.all('SELECT * FROM txt_table WHERE txt = ? LIMIT ?', faulty, function (err) {
           assert.equal(err, undefined);
           done();
       });
   });