awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-10-07 16:27:40 +00:00
Code Issues Packages Projects Releases Wiki Activity

escape special characters for ILIKE search

Browse Source
This commit is contained in:
x032205
2025-11-14 20:33:50 -05:00
parent 353fe417d0
commit a37d27ece3
3 changed files with 14 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/src/ee/services/pam-account/pam-account-dal.ts
+6 -3
View File
@@ -50,11 +50,14 @@ export const pamAccountDALFactory = (db: TDbClient) => {
} }
if (search) { if (search) {
// escape special characters (`%`, `_`) and the escape character itself (`\`)
const escapedSearch = search.replace(/\\/g, "\\\\").replace(/%/g, "\\%").replace(/_/g, "\\_");
const pattern = `%${escapedSearch}%`;
void query.where((q) => { void query.where((q) => {
void q void q
.whereILike(`${TableName.PamAccount}.name`, `%${search}%`) .whereRaw(`??.?? ILIKE ? ESCAPE '\\'`, [TableName.PamAccount, "name", pattern])
.orWhereILike(`${TableName.PamResource}.name`, `%${search}%`) .orWhereRaw(`??.?? ILIKE ? ESCAPE '\\'`, [TableName.PamResource, "name", pattern])
.orWhereILike(`${TableName.PamAccount}.description`, `%${search}%`); .orWhereRaw(`??.?? ILIKE ? ESCAPE '\\'`, [TableName.PamAccount, "description", pattern]);
}); });
} }
backend/src/ee/services/pam-folder/pam-folder-dal.ts
+3 -1
View File
@@ -43,7 +43,9 @@ export const pamFolderDALFactory = (db: TDbClient) => {
} }
if (search) { if (search) {
void query.whereILike(`${TableName.PamFolder}.name`, `%${search}%`); // escape special characters (`%`, `_`) and the escape character itself (`\`)
const escapedSearch = search.replace(/\\/g, "\\\\").replace(/%/g, "\\%").replace(/_/g, "\\_");
void query.whereRaw(`??.?? ILIKE ? ESCAPE '\\'`, [TableName.PamFolder, "name", `%${escapedSearch}%`]);
} }
const countQuery = query.clone().count("*", { as: "count" }).first(); const countQuery = query.clone().count("*", { as: "count" }).first();
backend/src/ee/services/pam-resource/pam-resource-dal.ts
+5 -2
View File
@@ -47,10 +47,13 @@ export const pamResourceDALFactory = (db: TDbClient) => {
const query = dbInstance(TableName.PamResource).where(`${TableName.PamResource}.projectId`, projectId); const query = dbInstance(TableName.PamResource).where(`${TableName.PamResource}.projectId`, projectId);
if (search) { if (search) {
// escape special characters (`%`, `_`) and the escape character itself (`\`)
const escapedSearch = search.replace(/\\/g, "\\\\").replace(/%/g, "\\%").replace(/_/g, "\\_");
const pattern = `%${escapedSearch}%`;
void query.where((q) => { void query.where((q) => {
void q void q
.whereILike(`${TableName.PamResource}.name`, `%${search}%`) .whereRaw(`??.?? ILIKE ? ESCAPE '\\'`, [TableName.PamResource, "name", pattern])
.orWhereILike(`${TableName.PamResource}.resourceType`, `%${search}%`); .orWhereRaw(`??.?? ILIKE ? ESCAPE '\\'`, [TableName.PamResource, "resourceType", pattern]);
}); });
} }