Missing single quote escape

porterhau5 · Sep 1, 2016 · 69a0352 · 69a0352
1 parent 16ff60d
commit 69a0352
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/js/utils.js b/src/js/utils.js
@@ -363,7 +363,7 @@ export function buildMergeQuery(rows, type){
 			if (row.UserName === 'ANONYMOUS LOGON@UNKNOWN' || row.UserName === ''){
 				return
 			}
-			row.UserName = row.UserName.toUpperCase()
+			row.UserName = escapeSingleQuotes(row.UserName.toUpperCase())
 			row.ComputerName = escapeSingleQuotes(row.ComputerName.toUpperCase())
 			queries.statements.push({"statement": userQuery.format(row.UserName, row.ComputerName, row.Weight)})
 		})