Escape single quotes in key/val strings

PostgREST · Jun 30, 2023 · 98f626b · 98f626b
1 parent dec81f1
commit 98f626b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/PostgREST/Config.hs b/src/PostgREST/Config.hs
@@ -491,6 +491,6 @@ addFallbackAppName version dbUri = dbUri <>
     _        -> "&" <> uriFmt
   where
     uriFmt = toS $ escapeURIString isUnescapedInURI $ toS (pKeyWord <> pgrstVer)
-    keyValFmt = pKeyWord <> "'" <> pgrstVer <> "'"
+    keyValFmt = pKeyWord <> "'" <> T.replace "'" "\\'" pgrstVer <> "'"
     pKeyWord = "fallback_application_name="
     pgrstVer = "PostgREST " <> T.decodeUtf8 version