You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently, only quote characters are escaped. However, N1QL strings support JSON-like backslash escaping as well. This means that any string with a single backslash will be misinterpreted and cause N1QL invalid syntax errors.
[
{
"code": 3000,
"msg": "syntax error: invalid quoted string - at 'North American Ale\\'",
"query": "SELECT * FROM `beer-sample` WHERE type = 'beer' AND category = 'North American Ale\\' LIMIT 1"
}
]
Currently, only quote characters are escaped. However, N1QL strings support JSON-like backslash escaping as well. This means that any string with a single backslash will be misinterpreted and cause N1QL invalid syntax errors.
https://forums.couchbase.com/t/how-to-sanitize-user-input/28830/4
Note: This is a potential security flaw, it may allow N1QL injection attacks.
The text was updated successfully, but these errors were encountered: