search

oscarngncc / COMP4111_project

COMP4111 project
0 stars 0 forks source link

% character is not escaped in book lookup #20

Open STommydx opened 4 years ago

STommydx commented 4 years ago

Describe the bug % character is not escaped in LIKE statements in book searching criteria.

To Reproduce

  1. Login as usual
  2. Add a book that title does not contains % 
    {
        "Title": "# Book!",
        "Author": "Author",
        "Publisher": "Publisher",
        "Year": "2028"
}
  3. Search book containing title % GET localhost:8080/BookManagementService/books?token={{token}}&title=%25

Expected behavior 204 No Content

What actually happens 200 OK with the book returned

{
    "FoundBooks": 1,
    "Results": [
        {
            "Title": "# Book!",
            "Author": "Author",
            "Publisher": "Publisher",
            "Year": "2028"
        }
    ]
}