From dfec430b8631a4b69b46e39146513da804213d83 Mon Sep 17 00:00:00 2001
From: Thomas Camlong <thomas@ajnart.fr>
Date: Mon, 8 Jun 2026 16:19:11 +0200
Subject: [PATCH] fix(beszel): escape backslashes before quotes in filter
 values

Fixes CodeQL warning: incomplete string escaping. Backslashes must be
escaped first to prevent `\'` injection via `\` in user input.
---
 packages/integrations/src/beszel/beszel-integration.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/integrations/src/beszel/beszel-integration.ts b/packages/integrations/src/beszel/beszel-integration.ts
index 83fa155e5..eb646c5dc 100644
--- a/packages/integrations/src/beszel/beszel-integration.ts
+++ b/packages/integrations/src/beszel/beszel-integration.ts
@@ -23,7 +23,7 @@ import type {
   UpdateAlertInput,
 } from "./beszel-types";
 
-const escapeFilterValue = (value: string) => value.replace(/'/g, "\\'");
+const escapeFilterValue = (value: string) => value.replace(/\\/g, "\\\\").replace(/'/g, "\\'");
 
 interface BeszelSession {
   token: string;