Search result not loading when search input has an apostrophe?

Snackers · June 2021

I'm not sure how long this has been around.

When searching a level with an apostrophe in it, the search is stuck on loading forever. E.g. when I search for Kakko's latest level, "Don't Eat And Litter", I get this issue, but when I just search by "Eat And Litter" the search returns fine. This is always the case when your search contains an apostrophe and is also prevalent in Robot Wants Kitty.

xglsuperbounce · June 2021

https://en.wikipedia.org/wiki/SQL_injection#Blind_SQL_injection

Edit: to be clear this is likely the cause.

Snackers · June 2021

Hopefully they find a workaround for this. Odd thing is that it can handle all symbols except for apostrophes.

xglsuperbounce · June 2021

It's because ' is a string literal delimiter in SQL, your discovery of this bug leads me to believe it would be (potentially) possible to actually delete all the levels on maker mall. Definitely not ideal. It's not really a place to have a "workaround" its just a pretty severe security vulnerability

Snackers · June 2021

Eek

Search result not loading when search input has an apostrophe?

Comments