- 🇱🇹Lithuania k-l
Attaching patch for v2.0 version. Also Changed to use entity query instead of simple select.
The search term is used as is in an sql query, which leads to SQL injections.
Please see
https://www.drupal.org/docs/8/security/secure-database-queries →
Also, the results should be restricted per user. It shouldn't allow user A to see user B's files.
Needs review
1.0
Code
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
Attaching patch for v2.0 version. Also Changed to use entity query instead of simple select.