18035 name request search with single quote (#1449)

bcgov · Oct 5, 2023 · 54c5502 · 54c5502
1 parent 2b1f760
commit 54c5502
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/api/namex/resources/requests.py b/api/namex/resources/requests.py
@@ -411,6 +411,7 @@ def get():
             if nr_number:
                 condition = f"requests.nr_num ILIKE '%{nr_number}%'"
             if nr_name:
+                nr_name = nr_name.replace("'", "''")
                 if condition:
                     condition += ' OR '
                 name_condition = "requests.name_search ILIKE '%"