b1944b7ca3
case 4716 - pick-list search text passed as SQL parameters
...
PickListSqlBuilder put the search text and the tag search text into the SQL
inside quotes with no escaping, reachable by any login (security review F18);
an apostrophe in a search also made the query fail. The builder now writes
@plq / @pltag and PickListFetcher adds them as Npgsql parameters (same %text%
match; wildcards typed by the user still apply).
Changelog: searching selection lists for text with an apostrophe now works.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com >
2026-10-24 12:28:43 -07:00
adda80c05b
2021-09-10 17:35:26 +00:00
a13ed7c096
2021-09-09 15:29:19 +00:00
316c8aa5bd
Final (?) de-widgetification
2021-09-07 14:33:48 +00:00
05d697485e
2021-06-15 17:21:28 +00:00
dde1b8bb8c
rename all variants of naming that hold an AyaType value to "aType" (parameter) / "AType" (not parameter) everywhere front and back; "ayType", "objectType", "oType" all are used in various areas
2021-03-23 17:06:05 +00:00
9ee1a68b84
2021-01-15 20:53:48 +00:00
061b05035b
change picklist preselect from a single long to a array of long
2021-01-13 17:26:51 +00:00
369b8f3af8
2021-01-13 15:51:40 +00:00
74db405e62
2021-01-02 00:30:15 +00:00
1a3bdb36c5
2020-12-15 19:17:28 +00:00
5da01d776a
2020-12-03 18:18:58 +00:00
fd8c489914
changed all lambda experssion variables to z from various where appropriate
2020-05-18 19:42:42 +00:00
127d113f8f
2020-03-25 16:02:15 +00:00
cd5d06a8a6
2020-03-23 22:22:34 +00:00
7e361d3f41
2020-03-23 20:00:16 +00:00
ac80356dfa
2020-03-19 17:37:15 +00:00
ac7f0f94e1
2020-03-19 15:46:35 +00:00
62807f62b1
2020-03-18 18:36:25 +00:00
ea235a9a0c
2020-03-18 18:07:16 +00:00
d1e7de27b2
2020-03-18 00:01:03 +00:00
9d55c8713b
2020-03-16 23:48:01 +00:00
fd3f8cb923
2020-03-16 23:25:19 +00:00
eddfcf6019
2020-03-16 23:18:49 +00:00
3b85a92a0b
2020-03-16 23:13:06 +00:00
cb54498829
2020-03-16 23:07:48 +00:00
cdfca271d3
2020-03-16 22:43:26 +00:00
fd63ad2320
2020-03-16 22:32:28 +00:00
85ddf8bd7b
2020-03-16 20:01:36 +00:00
e69d287125
2020-03-16 19:23:23 +00:00
bd97a57c11
2020-03-16 18:49:06 +00:00
1a63d43483
2020-03-13 21:51:12 +00:00
84dbf06991
2020-03-13 21:48:25 +00:00
73ccf1c359
2020-03-13 21:18:59 +00:00
6c2370b053
2020-03-13 20:29:19 +00:00
559fb04bd5
2020-03-13 19:47:45 +00:00
6ea38ba347
2020-03-13 19:43:27 +00:00
75b18e0f0e
2020-03-13 19:28:54 +00:00
d6d69b4a0c
2020-03-13 19:11:29 +00:00
8163f43fd7
2020-03-13 15:19:08 +00:00
3f34a5f782
2020-03-12 23:39:00 +00:00
883e10fcd7
2020-03-12 22:36:20 +00:00
