fix(filter box): replace freeform where clause with ilike (apache#14900)

CybercentreCanada · Dec 17, 2021 · 4714b07 · 4714b07
1 parent 0c1fbce
commit 4714b07
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/superset-frontend/src/visualizations/FilterBox/FilterBox.jsx b/superset-frontend/src/visualizations/FilterBox/FilterBox.jsx
@@ -223,10 +223,10 @@ class FilterBox extends React.PureComponent {
         ? [
             {
               clause: 'WHERE',
-              comparator: null,
-              expressionType: 'SQL',
-              // TODO: Evaluate SQL Injection risk
-              sqlExpression: `lower(${key}) like '%${input}%'`,
+              expressionType: 'SIMPLE',
+              subject: key,
+              operator: 'ILIKE',
+              comparator: `%${input}%`,
             },
           ]
         : null,