Escape quotes in IN clause

2024-01-15 10:20:58 +01:00 · 2024-01-15 10:20:58 +01:00 · 535b2b6594
parent 3a180c1b3c
commit 535b2b6594
1 changed files with 1 additions and 1 deletions
--- a/server/lib/meilisearch/meilisearch-queries.ts
+++ b/server/lib/meilisearch/meilisearch-queries.ts
@ -23,5 +23,5 @@ export function buildInQuery (term: string, values: string[] | number[]) {
 }

 export function buildInValuesArray (values: string[] | number[]) {
-  return '[' + values.map(v => `'${v}'`).join(',') + ']'
+  return '[' + values.map(v => `'${v.replace(/'/g, '\\\'')}'`).join(',') + ']'
 }