fix(beszel): escape backslashes before quotes in filter values

Fixes CodeQL warning: incomplete string escaping. Backslashes must be
escaped first to prevent `\'` injection via `\` in user input.
This commit is contained in:
Thomas Camlong committed 2026-06-08 16:19:11 +02:00
1 parent 466c439ba2
commit dfec430b86
1 file changed
+1 -1
@@ -23,7 +23,7 @@ import type {
UpdateAlertInput,
} from "./beszel-types";
const escapeFilterValue = (value: string) => value.replace(/'/g, "\\'");
const escapeFilterValue = (value: string) => value.replace(/\\/g, "\\\\").replace(/'/g, "\\'");
interface BeszelSession {
token: string;