awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-09-22 13:39:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

escape special characters for ILIKE search

Browse Source
This commit is contained in:
x032205
2025-11-14 20:33:50 -05:00
parent 353fe417d0
commit a37d27ece3
3 changed files with 14 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
backend/src/ee/services/pam-account/pam-account-dal.ts
View File

@@ -50,11 +50,14 @@ export const pamAccountDALFactory = (db: TDbClient) => {
}
if (search) {
// escape special characters (`%`, `_`) and the escape character itself (`\`)
const escapedSearch = search.replace(/\\/g, "\\\\").replace(/%/g, "\\%").replace(/_/g, "\\_");
const pattern = `%${escapedSearch}%`;
void query.where((q) => {
void q
.whereILike(`${TableName.PamAccount}.name`, `%${search}%`)
.orWhereILike(`${TableName.PamResource}.name`, `%${search}%`)
.orWhereILike(`${TableName.PamAccount}.description`, `%${search}%`);
.whereRaw(`??.?? ILIKE ? ESCAPE '\\'`, [TableName.PamAccount, "name", pattern])
.orWhereRaw(`??.?? ILIKE ? ESCAPE '\\'`, [TableName.PamResource, "name", pattern])
.orWhereRaw(`??.?? ILIKE ? ESCAPE '\\'`, [TableName.PamAccount, "description", pattern]);
});
}

4
backend/src/ee/services/pam-folder/pam-folder-dal.ts
View File

@@ -43,7 +43,9 @@ export const pamFolderDALFactory = (db: TDbClient) => {
}
if (search) {
void query.whereILike(`${TableName.PamFolder}.name`, `%${search}%`);
// escape special characters (`%`, `_`) and the escape character itself (`\`)
const escapedSearch = search.replace(/\\/g, "\\\\").replace(/%/g, "\\%").replace(/_/g, "\\_");
void query.whereRaw(`??.?? ILIKE ? ESCAPE '\\'`, [TableName.PamFolder, "name", `%${escapedSearch}%`]);
}
const countQuery = query.clone().count("*", { as: "count" }).first();

7
backend/src/ee/services/pam-resource/pam-resource-dal.ts
View File

@@ -47,10 +47,13 @@ export const pamResourceDALFactory = (db: TDbClient) => {
const query = dbInstance(TableName.PamResource).where(`${TableName.PamResource}.projectId`, projectId);
if (search) {
// escape special characters (`%`, `_`) and the escape character itself (`\`)
const escapedSearch = search.replace(/\\/g, "\\\\").replace(/%/g, "\\%").replace(/_/g, "\\_");
const pattern = `%${escapedSearch}%`;
void query.where((q) => {
void q
.whereILike(`${TableName.PamResource}.name`, `%${search}%`)
.orWhereILike(`${TableName.PamResource}.resourceType`, `%${search}%`);
.whereRaw(`??.?? ILIKE ? ESCAPE '\\'`, [TableName.PamResource, "name", pattern])
.orWhereRaw(`??.?? ILIKE ? ESCAPE '\\'`, [TableName.PamResource, "resourceType", pattern]);
});
}