Correctly escape the paths so we only display favorites instead of wildcards

10 years ago · 2cdec74e8a
parent 623d34972d
commit 2cdec74e8a
1 changed files with 1 additions and 1 deletions
--- a/apps/files/lib/activity.php
+++ b/apps/files/lib/activity.php
@ -391,7 +391,7 @@ class Activity implements IExtension {
 			}
 			foreach ($favorites['folders'] as $favorite) {
 				$fileQueryList[] = '`file` LIKE ?';
-				$parameters[] = $favorite . '/%';
+				$parameters[] = \OC::$server->getDatabaseConnection()->escapeLikeParameter($favorite) . '/%';
 			}

 			return [