always escape RegExp when building query in mongoose connector

Fix #10348
strapi · Jun 28, 2021 · 977cdcf · 977cdcf
1 parent db34e73
commit 977cdcf
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/packages/strapi-connector-mongoose/lib/buildQuery.js b/packages/strapi-connector-mongoose/lib/buildQuery.js
@@ -601,7 +601,7 @@ const buildWhereClause = ({ field, operator, value }) => {
     case 'contains': {
       return {
         [field]: {
-          $regex: `${val}`,
+          $regex: _.escapeRegExp(`${val}`),
           $options: 'i',
         },
       };
@@ -615,7 +615,7 @@ const buildWhereClause = ({ field, operator, value }) => {
     case 'containss':
       return {
         [field]: {
-          $regex: `${val}`,
+          $regex: _.escapeRegExp(`${val}`),
         },
       };
     case 'ncontainss':