Escape search queries

rainbowdashlabs · Jun 12, 2024 · d7ee5b6 · d7ee5b6
1 parent e0c35cb
commit d7ee5b6
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 3 deletions.
diff --git a/src/main/java/de/chojo/krile/data/access/RepositoryData.java b/src/main/java/de/chojo/krile/data/access/RepositoryData.java
@@ -314,7 +314,7 @@ public List<CompletedCategory> completeCategories(String value) {
                 FROM repository_category rc
                          LEFT JOIN category c ON rc.category_id = c.id
                          LEFT JOIN repository_meta rm ON rc.repository_id = rm.repository_id
-                WHERE rm.public AND category ILIKE ('%' || ? || '%')
+                WHERE rm.public AND category ILIKE ('%%' || ? || '%%')
                 LIMIT 25""";
 
         return query(select)

diff --git a/src/main/java/de/chojo/krile/data/access/TagData.java b/src/main/java/de/chojo/krile/data/access/TagData.java
@@ -139,7 +139,7 @@ public List<CompletedCategory> completeCategories(String value) {
                         LEFT JOIN category c
                         ON tc.category_id = c.id
                 WHERE public
-                  AND category ILIKE '%' || ? || '%'
+                  AND category ILIKE '%%' || ? || '%%'
                 LIMIT 25""";
         return query(select)
                 .single(call().bind(value))

diff --git a/src/main/java/de/chojo/krile/data/dao/tagguild/Repositories.java b/src/main/java/de/chojo/krile/data/dao/tagguild/Repositories.java
@@ -105,7 +105,7 @@ public List<CompletedRepository> complete(String value) {
                 FROM guild_repository gr
                          LEFT JOIN repository r ON r.id = gr.repository_id
                 WHERE guild_id = ?
-                  AND identifier ILIKE '%' || ? || '%'
+                  AND identifier ILIKE '%%' || ? || '%%'
                 ORDER BY priority DESC
                 LIMIT 25""";