b1944b7ca3
case 4716 - pick-list search text passed as SQL parameters
...
PickListSqlBuilder put the search text and the tag search text into the SQL
inside quotes with no escaping, reachable by any login (security review F18);
an apostrophe in a search also made the query fail. The builder now writes
@plq / @pltag and PickListFetcher adds them as Npgsql parameters (same %text%
match; wildcards typed by the user still apply).
Changelog: searching selection lists for text with an apostrophe now works.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-24 12:28:43 -07:00
4f70082d09
2021-09-09 00:06:16 +00:00
dde1b8bb8c
rename all variants of naming that hold an AyaType value to "aType" (parameter) / "AType" (not parameter) everywhere front and back; "ayType", "objectType", "oType" all are used in various areas
2021-03-23 17:06:05 +00:00
69cead72f1
2021-01-22 17:54:34 +00:00
8fa01c9638
2021-01-15 20:47:32 +00:00
64b6e8aa74
2021-01-15 20:42:21 +00:00
92c3c0de68
2021-01-15 19:16:02 +00:00
50ad8142ee
DE-INDEXIFICATION removed all tag and name indexes as found they were not being used at all for picklist queries which was why they were added
2021-01-15 19:13:41 +00:00
369b8f3af8
2021-01-13 15:51:40 +00:00
1a3bdb36c5
2020-12-15 19:17:28 +00:00
fd8c489914
changed all lambda experssion variables to z from various where appropriate
2020-05-18 19:42:42 +00:00
7e361d3f41
2020-03-23 20:00:16 +00:00
cb08a727fa
2020-03-23 19:58:27 +00:00
ac7f0f94e1
2020-03-19 15:46:35 +00:00
514ac54c3d
2020-03-17 16:01:07 +00:00
f001786137
2020-03-16 23:02:51 +00:00
b20882cb5e
2020-03-16 22:54:00 +00:00
a5e805c858
2020-03-16 22:25:27 +00:00
a972dff324
2020-03-16 19:36:46 +00:00
e69d287125
2020-03-16 19:23:23 +00:00
02cdaa1346
2020-03-13 19:32:34 +00:00
75b18e0f0e
2020-03-13 19:28:54 +00:00
d6d69b4a0c
2020-03-13 19:11:29 +00:00
8163f43fd7
2020-03-13 15:19:08 +00:00
883e10fcd7
2020-03-12 22:36:20 +00:00
2cf681d7d7
2020-03-12 19:25:20 +00:00
