mirror of
https://github.com/nextcloud/server.git
synced 2026-06-29 12:24:50 +02:00
Correctly escape the paths so we only display favorites instead of wildcards
This commit is contained in:
@@ -391,7 +391,7 @@ class Activity implements IExtension {
|
||||
}
|
||||
foreach ($favorites['folders'] as $favorite) {
|
||||
$fileQueryList[] = '`file` LIKE ?';
|
||||
$parameters[] = $favorite . '/%';
|
||||
$parameters[] = \OC::$server->getDatabaseConnection()->escapeLikeParameter($favorite) . '/%';
|
||||
}
|
||||
|
||||
return [
|
||||
|
||||
Reference in New Issue
Block a user