inteligr8/alfresco-community-repo
1
0
Fork 0
mirror of https://github.com/Alfresco/alfresco-community-repo.git synced 2025-08-07 17:49:17 +00:00
Code Issues Packages Projects Releases Wiki Activity

ALF-12013 All uses of SQL like need to be protected with <include refid="alfresco.util.escape"/> for SQL Server

Browse Source 
- fixes failing GetChildrenCannedQueryTest test for SQL Server

git-svn-id: https://svn.alfresco.com/repos/alfresco-enterprise/alfresco/HEAD/root@32730 c4b6b30b-aa2e-2d43-bbcb-ca4b014f7261
This commit is contained in:
Andrew Hind
2011-12-13 14:44:08 +00:00
parent c8d10f68ae
commit e18d1961ab
3 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
config/alfresco/ibatis/org.hibernate.dialect.Dialect/node-common-SqlMap.xml
View File

@@ -1056,7 +1056,7 @@
</foreach> </foreach>
</if> </if>
<if test="pattern != null"> <if test="pattern != null">
and prop4.string_value like #{pattern} and prop4.string_value like #{pattern} <include refid="alfresco.util.escape"/>
</if> </if>
<if test="prop1qnameId == null and auditableProps == false"> <if test="prop1qnameId == null and auditableProps == false">
<include refid="alfresco.node.select_ChildAssoc_OrderBy"/> <include refid="alfresco.node.select_ChildAssoc_OrderBy"/>
@@ -1087,7 +1087,7 @@
</foreach> </foreach>
</if> </if>
<if test="pattern != null"> <if test="pattern != null">
and prop4.string_value like #{pattern} and prop4.string_value like #{pattern} <include refid="alfresco.util.escape"/>
</if> </if>
<include refid="alfresco.node.select_ChildAssoc_OrderBy"/> <include refid="alfresco.node.select_ChildAssoc_OrderBy"/>
</select> </select>

2
config/alfresco/ibatis/org.hibernate.dialect.Dialect/patch-common-SqlMap.xml
View File

@@ -133,7 +133,7 @@
and id < #{idTwo} and id < #{idTwo}
and class_type = 'plainfile' and class_type = 'plainfile'
and content_url is not null and content_url is not null
and content_url not like 'id:%' and content_url not like 'id:%' <include refid="alfresco.util.escape"/>
order by order by
id ASC id ASC
]]> ]]>

4
config/alfresco/ibatis/org.hibernate.dialect.Dialect/query-test-common-SqlMap.xml
View File

@@ -38,7 +38,7 @@
<if test="mimetypeMatch != null"> <if test="mimetypeMatch != null">
where where
<if test="exact == true">mimetype_str = #{mimetypeMatch}</if> <if test="exact == true">mimetype_str = #{mimetypeMatch}</if>
<if test="exact == false">mimetype_str like #{mimetypeMatch}</if> <if test="exact == false">mimetype_str like #{mimetypeMatch} <include refid="alfresco.util.escape"/> </if>
</if> </if>
<if test="forceFail == true">JUNKED</if> <if test="forceFail == true">JUNKED</if>
</select> </select>
@@ -51,7 +51,7 @@
<if test="mimetypeMatch != null"> <if test="mimetypeMatch != null">
where where
<if test="exact == true">mimetype_str = #{mimetypeMatch}</if> <if test="exact == true">mimetype_str = #{mimetypeMatch}</if>
<if test="exact == false">mimetype_str like #{mimetypeMatch}</if> <if test="exact == false">mimetype_str like #{mimetypeMatch} <include refid="alfresco.util.escape"/></if>
</if> </if>
<if test="forceFail == true">JUNKED</if> <if test="forceFail == true">JUNKED</if>
</select> </select>