From 535b2b6594fca1f6f355702a06285000b9c97587 Mon Sep 17 00:00:00 2001 From: Chocobozzz Date: Mon, 15 Jan 2024 10:20:58 +0100 Subject: [PATCH] Escape quotes in IN clause --- server/lib/meilisearch/meilisearch-queries.ts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/server/lib/meilisearch/meilisearch-queries.ts b/server/lib/meilisearch/meilisearch-queries.ts index abd97b4..87c228b 100644 --- a/server/lib/meilisearch/meilisearch-queries.ts +++ b/server/lib/meilisearch/meilisearch-queries.ts @@ -23,5 +23,5 @@ export function buildInQuery (term: string, values: string[] | number[]) { } export function buildInValuesArray (values: string[] | number[]) { - return '[' + values.map(v => `'${v}'`).join(',') + ']' + return '[' + values.map(v => `'${v.replace(/'/g, '\\\'')}'`).join(',') + ']' }