Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-15727

The escape parameter should be escaped when it appears in a like parameter

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Major
    • Resolution: Fixed
    • Affects Version/s: 9.3-rc-1, 8.4.5
    • Fix Version/s: 9.11.8, 10.9, 10.8.2
    • Component/s: Query
    • Labels:
      None
    • Tests:
      Unit
    • Difficulty:
      Unknown
    • Documentation:
      N/A
    • Documentation in Release Notes:
      N/A
    • Pull Request Status:
      Pull Request accepted
    • Similar issues:

      Description

      Creating a request such as:

      where ( doc.fullName like ? )
      

      and binding it with a parameter containing a LikePart such as "Foo!" will cause error because the "!" is used as escaped character by default and is not escaped.

      We should always escaped the escape character when it's used inside the content of a LikePart.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              vmassol Vincent Massol
              Reporter:
              surli Simon Urli
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Date of First Response: