Single Quotes Not Properly Escaped with Cascading Query
Brought to you by:
gsteimer,
tsgopensource
STS005, Simple Quote tab, step 1 fails.
If you have a textbox driving a cascading query, and you type a value with a single quote in the textbox, the query fails because it is not properly escaped. From initial research, it doesn't look like there's a good place in OC to fix this error, so we should look into adding the following to flex:
- When replacing the token value, if the token is a part of a query action, replace any single quotes in the token value wih a double single quote
This will definitely fix the issue for Documentum, but we may need to revisit this fix for other systems (AWLite against a database / Alfresco)
The reason it can't rely on OpenContent is because it is using a passthrough query, which is literally just a query to give OpenContent to run, and OpenContent has no idea what kind of query it is, it just runs it.