43d94296a08791945f5f6c3288a26202574e8127,oak-core/src/main/java/org/apache/jackrabbit/oak/security/user/query/XPathConditionVisitor.java,XPathConditionVisitor,visit,#Condition.Property#,62

Before Change


                    .append(condition.getPattern())
                    .append("')");
        } else {
            statement.append(condition.getRelPath())
                    .append(condition.getOp().getOp())
                    .append(QueryUtil.format(condition.getValue()));
        }

After Change


            statement.append(QueryUtil.escapeForQuery(condition.getRelPath()));
        } else if (relOp == RelationOp.LIKE) {
            statement.append("jcr:like(")
                    .append(QueryUtil.escapeForQuery(condition.getRelPath()))
                    .append(",'")
                    .append(QueryUtil.escapeForQuery(condition.getPattern()))
                    .append("')");
        } else {
            statement.append(QueryUtil.escapeForQuery(condition.getRelPath()))
                    .append(condition.getOp().getOp())
                    .append(QueryUtil.format(condition.getValue()));
        }