diff options
| author | MeiMei <30769358+mei23@users.noreply.github.com> | 2023-01-08 20:32:17 +0900 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2023-01-08 20:32:17 +0900 |
| commit | 10e526ba5682fef9488d1d38ba5dfcda38619673 (patch) | |
| tree | 1677ade360e317be70200050cb67b0957f35ebca /packages/backend/src/server/api/endpoints/federation | |
| parent | fix following chart (diff) | |
| download | sharkey-10e526ba5682fef9488d1d38ba5dfcda38619673.tar.gz sharkey-10e526ba5682fef9488d1d38ba5dfcda38619673.tar.bz2 sharkey-10e526ba5682fef9488d1d38ba5dfcda38619673.zip | |
fix: Escape SQL LIKE (#9493)
* SQL LIKE escape
* CHANGELOG
Diffstat (limited to 'packages/backend/src/server/api/endpoints/federation')
| -rw-r--r-- | packages/backend/src/server/api/endpoints/federation/instances.ts | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/packages/backend/src/server/api/endpoints/federation/instances.ts b/packages/backend/src/server/api/endpoints/federation/instances.ts index 5e2f204661..726979309f 100644 --- a/packages/backend/src/server/api/endpoints/federation/instances.ts +++ b/packages/backend/src/server/api/endpoints/federation/instances.ts @@ -4,6 +4,7 @@ import type { InstancesRepository } from '@/models/index.js'; import { InstanceEntityService } from '@/core/entities/InstanceEntityService.js'; import { MetaService } from '@/core/MetaService.js'; import { DI } from '@/di-symbols.js'; +import { sqlLikeEscape } from '@/misc/sql-like-escape'; export const meta = { tags: ['federation'], @@ -120,7 +121,7 @@ export default class extends Endpoint<typeof meta, typeof paramDef> { } if (ps.host) { - query.andWhere('instance.host like :host', { host: '%' + ps.host.toLowerCase() + '%' }); + query.andWhere('instance.host like :host', { host: '%' + sqlLikeEscape(ps.host.toLowerCase()) + '%' }); } const instances = await query.take(ps.limit).skip(ps.offset).getMany(); |