Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-15727

The escape parameter should be escaped when it appears in a like parameter

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 9.3-rc-1, 8.4.5
    • Fix Version/s: 9.11.8, 10.9, 10.8.2
    • Component/s: Query
    • Labels:
      None
    • Tests:
      Unit
    • Difficulty:
      Unknown
    • Documentation:
      N/A
    • Documentation in Release Notes:
      N/A
    • Pull Request Status:
      Pull Request accepted
    • Similar issues:

      Description

      Creating a request such as:

      where ( doc.fullName like ? )
      

      and binding it with a parameter containing a LikePart such as "Foo!" will cause error because the "!" is used as escaped character by default and is not escaped.

      We should always escaped the escape character when it's used inside the content of a LikePart.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                vmassol Vincent Massol
                Reporter:
                surli Simon Urli
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Date of First Response: