在动态sql中处理单引号的正确方法？

import sqlite3

def safe_execute(conn, query, params):
    cursor = conn.cursor()
    cursor.execute(query, params)
    conn.commit()

# 示例
conn = sqlite3.connect(':memory:')
safe_execute(conn, "INSERT INTO users (name) VALUES (?)", ("O'Reilly",))

import java.sql.*;

public class SafeSQL {
    public static void main(String[] args) throws SQLException {
        Connection conn = DriverManager.getConnection("jdbc:mysql://localhost:3306/test", "user", "password");
        String sql = "INSERT INTO users (name) VALUES (?)";
        PreparedStatement pstmt = conn.prepareStatement(sql);
        pstmt.setString(1, "O'Reilly");
        pstmt.executeUpdate();
    }
}

const mysql = require('mysql');

const connection = mysql.createConnection({
  host: 'localhost',
  user: 'user',
  password: 'password',
  database: 'test'
});

connection.connect();

const sql = "INSERT INTO users (name) VALUES (?)";
const values = ["O'Reilly"];

connection.query(sql, values, function (error, results, fields) {
  if (error) throw error;
  console.log('User added successfully');
});

connection.end();