From f3e0939a0656f64da9f9cc624b5e6d39b95fa6e2 Mon Sep 17 00:00:00 2001 From: Gary Sharp Date: Mon, 21 May 2018 16:22:41 +1000 Subject: [PATCH] Bug Fix: Ldap Query Escaping --- Disco.Services/Interop/ActiveDirectory/ADHelpers.cs | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/Disco.Services/Interop/ActiveDirectory/ADHelpers.cs b/Disco.Services/Interop/ActiveDirectory/ADHelpers.cs index 1e002273..09d589dd 100644 --- a/Disco.Services/Interop/ActiveDirectory/ADHelpers.cs +++ b/Disco.Services/Interop/ActiveDirectory/ADHelpers.cs @@ -45,7 +45,12 @@ namespace Disco.Services.Interop.ActiveDirectory internal static string EscapeLdapQuery(string query) { - return query.Replace("*", "\\2a").Replace("(", "\\28").Replace(")", "\\29").Replace("\\", "\\5c").Replace("NUL", "\\00").Replace("/", "\\2f"); + return query + .Replace(@"\", @"\5C") + .Replace("*", @"\2A") + .Replace("(", @"\28") + .Replace(")", @"\29") + .Replace("\0", @"\00"); } internal static string EscapeDistinguishedName(string DistinguishedName)