Escape the status field during updates. Fixes #24

RHoKAustralia · Jul 24, 2018 · 568396b · 568396b
1 parent f50087b
commit 568396b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/infrastructure/services/rides/update.js b/infrastructure/services/rides/update.js
@@ -36,7 +36,7 @@ module.exports.update = (event, context, callback) => {
     fbLink: `${escape(data.fbLink)}`,
     driverGender: `${escape(data.driverGender)}`,
     carType: `${escape(data.carType)}`,
-    status: `${data.status}`,
+    status: `${escape(data.status)}`,
     deleted: `0`,
     suburbFrom: `${escape(data.locationFrom.suburb)}`,
     placeNameFrom: `${escape(data.locationFrom.placeName)}`,