Update lib/Db/Row2Mapper.php

Co-authored-by: Julius Härtl <[email protected]> Signed-off-by: Florian <[email protected]>
nextcloud · Jan 3, 2024 · bf889fa · bf889fa
1 parent 8095e8c
commit bf889fa
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/Db/Row2Mapper.php b/lib/Db/Row2Mapper.php
@@ -287,7 +287,7 @@ private function getFilterExpression(IQueryBuilder $qb, Column $column, string $
 			case 'ends-with':
 				return $qb2->andWhere($qb->expr()->like('value', $qb->createNamedParameter($value.'%', $paramType)));
 			case 'contains':
-				return $qb2->andWhere($qb->expr()->like('value', $qb->createNamedParameter('%'.$value.'%', $paramType)));
+				return $qb2->andWhere($qb->expr()->like('value', $qb->createNamedParameter('%'.$this->db->escapeLikeParameter($value).'%', $paramType)));
 			case 'is-equal':
 				return $qb2->andWhere($qb->expr()->eq('value', $qb->createNamedParameter($value, $paramType)));
 			case 'is-greater-than':