From e4c7354ca17f167c71bde3c72451162acc732940 Mon Sep 17 00:00:00 2001
From: Peter Horvath <peter.horvath@sonarsource.com>
Date: Wed, 5 Jun 2024 09:49:52 +0200
Subject: [PATCH] SONAR-22340 Fix SSF-584

---
 .../main/resources/org/sonar/db/user/UserGroupMapper.xml    | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/server/sonar-db-dao/src/main/resources/org/sonar/db/user/UserGroupMapper.xml b/server/sonar-db-dao/src/main/resources/org/sonar/db/user/UserGroupMapper.xml
index 85961adcd0d..bf0e0ff5f4e 100644
--- a/server/sonar-db-dao/src/main/resources/org/sonar/db/user/UserGroupMapper.xml
+++ b/server/sonar-db-dao/src/main/resources/org/sonar/db/user/UserGroupMapper.xml
@@ -42,13 +42,13 @@
      <where>
         1=1
         <if test="query.uuid != null">
-            AND gu.uuid='${query.uuid}'
+            AND gu.uuid=#{query.uuid, jdbcType=VARCHAR}
         </if>
         <if test="query.userUuid != null">
-            AND gu.user_uuid='${query.userUuid}'
+            AND gu.user_uuid=#{query.userUuid, jdbcType=VARCHAR}
         </if>
         <if test="query.groupUuid != null">
-            AND gu.group_uuid='${query.groupUuid}'
+            AND gu.group_uuid=#{query.groupUuid, jdbcType=VARCHAR}
         </if>
     </where>
   </sql>
-- 
2.39.5