Use JSON.stringify to escape value for mysql when GET assets called w…

…ith metadata key:value filter (#1437)
NUWCDIVNPT · Nov 19, 2024 · b7d3598 · b7d3598
1 parent 5a203f6
commit b7d3598
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/api/source/service/AssetService.js b/api/source/service/AssetService.js
@@ -209,7 +209,7 @@ exports.queryAssets = async function (inProjection = [], inPredicates = {}, elev
     for (const pair of inPredicates.metadata) {
       const [key, value] = pair.split(/:(.*)/s)
       predicates.statements.push('JSON_CONTAINS(a.metadata, ?, ?)')
-      predicates.binds.push( `"${value}"`,  `$.${key}`)
+      predicates.binds.push( JSON.stringify(value), `$.${key}`)
     }
   }
   predicates.statements.push('cg.userId = ?')