Skip to content

Commit 57988e7

Browse files
committed
Escape options
1 parent ef8b4b6 commit 57988e7

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

Mvc.JQuery.Datatables/DataTableVm.cs

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -108,7 +108,8 @@ public _FilterOn(TTarget target, FilterRuleList list, Func<string, Type, bool> p
108108

109109
public TTarget Select(params string[] options)
110110
{
111-
AddRule("{type: 'select', values: ['" + string.Join("','", options) + "']}");
111+
var escapedOptions = options.Select(o => o.Replace("'", "''"));
112+
AddRule("{type: 'select', values: ['" + string.Join("','", escapedOptions) + "']}");
112113
return _target;
113114
}
114115
public TTarget NumberRange()
@@ -131,7 +132,8 @@ public TTarget Number()
131132

132133
public TTarget CheckBoxes(params string[] options)
133134
{
134-
AddRule("{type: 'checkbox', values: ['" + string.Join("','", options) + "']}");
135+
var escapedOptions = options.Select(o => o.Replace("'", "''"));
136+
AddRule("{type: 'checkbox', values: ['" + string.Join("','", escapedOptions) + "']}");
135137
return _target;
136138
}
137139

0 commit comments

Comments
 (0)