Files
notifications-api/tests/app
Chris Hill-Scott bdd77f9150 Escape special characters in search by recipient
SQLAlchemy handles escaping anything that could allow a SQL injection
attack. But it doesn’t escape the characters used for wildcard
searching. This is the reason we’re able to do `.like('%example%')`
at all.

But we shouldn’t be letting our users search with wildcard characters,
so we need to escape them. Which is what this commit does.
2018-03-14 10:51:34 +00:00
..
2018-03-12 10:48:46 +00:00
2018-03-09 09:53:05 +00:00
2018-03-13 12:03:14 +00:00