Escape apostrophizes char on filter
This commit is contained in:
parent
a781473b42
commit
fd9eaa5a4d
2 changed files with 11 additions and 1 deletions
|
@ -129,7 +129,7 @@ class DossiersListGestionnaireService
|
|||
def where_filter
|
||||
filter_preference_list.inject('') do |acc, preference|
|
||||
unless preference.filter.blank?
|
||||
filter = preference.filter.gsub('*', '%')
|
||||
filter = preference.filter.gsub('*', '%').gsub("'", "''")
|
||||
filter = "%"+filter+"%" unless filter.include? '%'
|
||||
|
||||
value = preference.table_with_s_attr
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue