Correctly escape the paths so we only display favorites instead of wildcards

diff --git a/apps/files/lib/activity.php b/apps/files/lib/activity.php
index d473120b31fc946ad13c39187c93f4f2b0ab2b48..c171b3bfabf160ba2bc612920e1b7f28255efcaa 100644 (file)
--- a/apps/files/lib/activity.php
+++ b/apps/files/lib/activity.php
@@ -391,7 +391,7 @@ class Activity implements IExtension {
                        }
                        foreach ($favorites['folders'] as $favorite) {
                                $fileQueryList[] = '`file` LIKE ?';
-                               $parameters[] = $favorite . '/%';
+                               $parameters[] = \OC::$server->getDatabaseConnection()->escapeLikeParameter($favorite) . '/%';
                        }
 
                        return [