Menu

#269 Single Quotes Not Properly Escaped with Cascading Query

v4.0 (Development)
open
nobody
AWLite (28)
5
2012-06-18
2010-12-15
No

STS005, Simple Quote tab, step 1 fails.

If you have a textbox driving a cascading query, and you type a value with a single quote in the textbox, the query fails because it is not properly escaped. From initial research, it doesn't look like there's a good place in OC to fix this error, so we should look into adding the following to flex:

- When replacing the token value, if the token is a part of a query action, replace any single quotes in the token value wih a double single quote

This will definitely fix the issue for Documentum, but we may need to revisit this fix for other systems (AWLite against a database / Alfresco)

Discussion

  • George Steimer

    George Steimer - 2011-02-01
    • priority: 5 --> 6
     
  • mwelburn

    mwelburn - 2011-06-01

    The reason it can't rely on OpenContent is because it is using a passthrough query, which is literally just a query to give OpenContent to run, and OpenContent has no idea what kind of query it is, it just runs it.

     
  • George Steimer

    George Steimer - 2012-06-18
    • priority: 6 --> 5
     

Log in to post a comment.