inteligr8/alfresco-community-repo
1
0
Fork 0
mirror of https://github.com/Alfresco/alfresco-community-repo.git synced 2025-07-31 17:39:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

ALF-12013 All uses of SQL like need to be protected with <include refid="alfresco.util.escape"/> for SQL Server

Browse Source 
- fixes failing GetChildrenCannedQueryTest test for SQL Server

git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@32730 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
Andrew Hind
2011-12-13 14:44:08 +00:00
parent c8d10f68ae
commit e18d1961ab
3 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
config/alfresco/ibatis/org.hibernate.dialect.Dialect/node-common-SqlMap.xml
View File

@@ -1056,7 +1056,7 @@
</foreach>
</if>
<if test="pattern != null">
and prop4.string_value like #{pattern}
and prop4.string_value like #{pattern} <include refid="alfresco.util.escape"/>
</if>
<if test="prop1qnameId == null and auditableProps == false">
<include refid="alfresco.node.select_ChildAssoc_OrderBy"/>
@@ -1087,7 +1087,7 @@
</foreach>
</if>
<if test="pattern != null">
and prop4.string_value like #{pattern}
and prop4.string_value like #{pattern} <include refid="alfresco.util.escape"/>
</if>
<include refid="alfresco.node.select_ChildAssoc_OrderBy"/>
</select>

2
config/alfresco/ibatis/org.hibernate.dialect.Dialect/patch-common-SqlMap.xml
View File

@@ -133,7 +133,7 @@
and id < #{idTwo}
and class_type = 'plainfile'
and content_url is not null
and content_url not like 'id:%'
and content_url not like 'id:%' <include refid="alfresco.util.escape"/>
order by
id ASC
]]>

4
config/alfresco/ibatis/org.hibernate.dialect.Dialect/query-test-common-SqlMap.xml
View File

@@ -38,7 +38,7 @@
<if test="mimetypeMatch != null">
where
<if test="exact == true">mimetype_str = #{mimetypeMatch}</if>
<if test="exact == false">mimetype_str like #{mimetypeMatch}</if>
<if test="exact == false">mimetype_str like #{mimetypeMatch} <include refid="alfresco.util.escape"/> </if>
</if>
<if test="forceFail == true">JUNKED</if>
</select>
@@ -51,7 +51,7 @@
<if test="mimetypeMatch != null">
where
<if test="exact == true">mimetype_str = #{mimetypeMatch}</if>
<if test="exact == false">mimetype_str like #{mimetypeMatch}</if>
<if test="exact == false">mimetype_str like #{mimetypeMatch} <include refid="alfresco.util.escape"/></if>
</if>
<if test="forceFail == true">JUNKED</if>
</select>