From d0b431b65022f849dd7ecb7272ebafed1b7f6dae Mon Sep 17 00:00:00 2001 From: Lars Simon Winzer Date: Tue, 24 Mar 2026 13:40:34 +0100 Subject: [PATCH] Fix: Escape single quote when masking string --- .../casono/server/network/response/ResponseEncoder.java | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/src/main/java/ch/unibas/dmi/dbis/cs108/casono/server/network/response/ResponseEncoder.java b/src/main/java/ch/unibas/dmi/dbis/cs108/casono/server/network/response/ResponseEncoder.java index 873ee66..bc66aad 100644 --- a/src/main/java/ch/unibas/dmi/dbis/cs108/casono/server/network/response/ResponseEncoder.java +++ b/src/main/java/ch/unibas/dmi/dbis/cs108/casono/server/network/response/ResponseEncoder.java @@ -49,8 +49,9 @@ public class ResponseEncoder { } private static String maskIfNeeded(String value) { - if (value.contains(" ")) { - return "'" + value + "'"; + if (value.contains(" ") || value.contains("'")) { + String escaped = value.replace("'", "\\'"); + return "'" + escaped + "'"; } return value; }