Try our conversational search powered by Generative AI!

ProfileAPI: Return many records when filtering with string '1=1'

Found in

EPiServer.Profiles 1.4.0

Fixed in

EPiServer.Profiles.Client 1.5.0

(Or a related package)

Created

Mar 06, 2018

Updated

Aug 06, 2018

State

Closed, Fixed and tested


Description

Precondition:
There are some profiles/trackevents in the system.

1. Send a query to get profiles/trackevents, ex:

https://psinte.azure-api.net/inte-profilesapi/api/v1.0/profiles/?$filter=Name eq "'1 = 1'"

Expected:
Returns records that include the keyword in Name property.

Actual:
Returns many records (not all), even if they don't include the keyword in Name property.