[mapserver-commits] [MapServer/MapServer] 1c73ac: Add missing column name escaping in FLTGetCommonEx...

[Even Rouault]

  Branch: refs/heads/branch-8-4
  Home:   https://github.com/MapServer/MapServer
  Commit: 1c73acaa2d7a8b1d3955f076186e57fc8c06e0c6
      https://github.com/MapServer/MapServer/commit/1c73acaa2d7a8b1d3955f076186e57fc8c06e0c6
  Author: Even Rouault <even.rouault at spatialys.com>
  Date:   2025-09-19 (Fri, 19 Sep 2025)

  Changed paths:
    A msautotest/wxs/data/weird_column_names.csv
    A msautotest/wxs/data/weird_column_names.csvt
    A msautotest/wxs/data/weird_column_names.db
    A msautotest/wxs/expected/wfs_ogr_native_sql_is_equal_to_invalid_property_name.xml
    A msautotest/wxs/expected/wfs_ogr_weird_column_names_binary_op_numeric.xml
    A msautotest/wxs/expected/wfs_ogr_weird_column_names_binary_op_string.xml
    M msautotest/wxs/wfs_ogr_native_sql.map
    M msautotest/wxs/wfs_ogr_no_native_sql.map
    M src/maplexer.c
    M src/maplexer.l
    M src/mapogcfiltercommon.cpp
    M src/mapogr.cpp
    M src/mapserver.h
    M src/mapstring.cpp

  Log Message:
  -----------
  Add missing column name escaping in FLTGetCommonExpression() (#7349)

and use msLayerEscapePropertyName() insead of msOGRGetQuotedItem() in
OGR backend

Fixes https://github.com/MapServer/MapServer/security/advisories/GHSA-256m-rx4h-r55w



To unsubscribe from these emails, change your notification settings at https://github.com/MapServer/MapServer/settings/notifications