diff options
| author | Lukas Reschke <lukas@statuscode.ch> | 2016-07-20 21:24:19 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2016-07-20 21:24:19 +0200 |
| commit | a17ba2f4889c92e7113606e17cc6b9f66512264f (patch) | |
| tree | bc0f77e97a21d93bc892f22f1756298e557438b4 /apps/dav | |
| parent | 78cad699fe48e29889145c394d2d86dfa35ea805 (diff) | |
| parent | 7c0de08cc44e0b04f23d6f3fa2d6030991935c54 (diff) | |
| download | nextcloud-server-a17ba2f4889c92e7113606e17cc6b9f66512264f.tar.gz nextcloud-server-a17ba2f4889c92e7113606e17cc6b9f66512264f.zip | |
Merge pull request #466 from nextcloud/escape-special-characters
Escape special characters (#25429)
Diffstat (limited to 'apps/dav')
| -rw-r--r-- | apps/dav/lib/Connector/Sabre/CustomPropertiesBackend.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/apps/dav/lib/Connector/Sabre/CustomPropertiesBackend.php b/apps/dav/lib/Connector/Sabre/CustomPropertiesBackend.php index d0d348e170e..b319350c7f0 100644 --- a/apps/dav/lib/Connector/Sabre/CustomPropertiesBackend.php +++ b/apps/dav/lib/Connector/Sabre/CustomPropertiesBackend.php @@ -327,7 +327,7 @@ class CustomPropertiesBackend implements BackendInterface { $result = $this->connection->executeQuery( $sql, - array($this->user, rtrim($path, '/') . '/%', $requestedProperties), + array($this->user, $this->connection->escapeLikeParameter(rtrim($path, '/')) . '/%', $requestedProperties), array(null, null, \Doctrine\DBAL\Connection::PARAM_STR_ARRAY) ); |