#535 escape string in multi row statements values via DatabaseUtils

capacitor-community · Apr 16, 2024 · 39a068a · 39a068a
1 parent fa0c4a9
commit 39a068a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/android/src/main/java/com/getcapacitor/community/database/sqlite/SQLite/Database.java b/android/src/main/java/com/getcapacitor/community/database/sqlite/SQLite/Database.java
@@ -12,6 +12,7 @@
 
 import android.content.Context;
 import android.content.SharedPreferences;
+import android.database.DatabaseUtils;
 import android.os.Build;
 import android.util.Log;
 import androidx.sqlite.db.SimpleSQLiteQuery;
@@ -503,7 +504,7 @@ public JSObject multipleRowsStatement(String statement, JSONArray valuesJson, St
                     String elementValue = "";
 
                     if (innerElement instanceof String) {
-                        elementValue = "'" + innerElement + "'";
+                        elementValue = DatabaseUtils.sqlEscapeString((String) innerElement);
                     } else {
                         elementValue = String.valueOf(innerElement);
                     }