[mapserver-commits] [MapServer/MapServer] aaeedc: Add missing column name escaping in FLTGetCommonEx...

[Even Rouault]

  Branch: refs/heads/main
  Home:   https://github.com/MapServer/MapServer
  Commit: aaeedcdabd1cca4b0f1e94cdcd5e48922d97dd00
      https://github.com/MapServer/MapServer/commit/aaeedcdabd1cca4b0f1e94cdcd5e48922d97dd00
  Author: Even Rouault <even.rouault at spatialys.com>
  Date:   2025-09-18 (Thu, 18 Sep 2025)

  Changed paths:
    A msautotest/wxs/data/weird_column_names.csv
    A msautotest/wxs/data/weird_column_names.csvt
    A msautotest/wxs/data/weird_column_names.db
    A msautotest/wxs/expected/wfs_ogr_native_sql_is_equal_to_invalid_property_name.xml
    A msautotest/wxs/expected/wfs_ogr_weird_column_names_binary_op_numeric.xml
    A msautotest/wxs/expected/wfs_ogr_weird_column_names_binary_op_string.xml
    M msautotest/wxs/wfs_ogr_native_sql.map
    M msautotest/wxs/wfs_ogr_no_native_sql.map
    M src/maplexer.c
    M src/maplexer.l
    M src/mapogcfiltercommon.cpp
    M src/mapogr.cpp
    M src/mapserver.h
    M src/mapstring.cpp

  Log Message:
  -----------
  Add missing column name escaping in FLTGetCommonExpression() (#7348)

and use msLayerEscapePropertyName() insead of msOGRGetQuotedItem() in
OGR backend

Fixes https://github.com/MapServer/MapServer/security/advisories/GHSA-256m-rx4h-r55w



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications