added in double quotes for single in query

pages/api/endpoint/getadvancedsearch_api.js

@@ -79,6 +79,7 @@ export default async function ApiProxy(req, res) {
             : "";
 
     //console.log(queryString);
+    queryString = queryString.replace(/\'/g, "''");
 
     var queryUrl =
         "incidents?$select=description,numberofchildincidents,_accountid_value,_customerid_value,_pinswg_associatedlpa_value,_ownerid_value,pinswg_appealcasetype,statuscode,ticketnumber,title, _primarycontactid_value,pinswg_lpareference&$expand=primarycontactid($select=fullname)&$filter=" +

pages/api/endpoint/getadvancedsearchpaged_api.js

@@ -113,6 +113,8 @@ export default async function ApiProxy(req, res) {
             ? " statuscode eq " + searchString.statuscode + " and"
             : "";
 
+    queryString = queryString.replace(/\'/g, "''");
+
     var queryUrl =
         "incidents?$select=description,numberofchildincidents,_accountid_value,_customerid_value,_pinswg_associatedlpa_value,_ownerid_value,pinswg_appealcasetype,statuscode,ticketnumber,title, _primarycontactid_value,pinswg_lpareference&$expand=primarycontactid($select=fullname)&$filter=" +
         queryString +

pages/api/endpoint/getbasicdnsurlsearch_api.js

@@ -43,6 +43,8 @@ export default async function ApiProxy(req, res) {
     var searchString = req.query.searchString;
     var token = await getToken();
 
+    searchString = searchString.replace(/\'/g, "''");
+
     var queryUrl =
         "incidents?$select=description,numberofchildincidents,_accountid_value,_customerid_value,_pinswg_associatedlpa_value,_ownerid_value,pinswg_appealcasetype,statuscode,ticketnumber,title, _primarycontactid_value,pinswg_lpareference&$expand=primarycontactid($select=fullname)&$filter=(contains(title, '" +
         searchString +

pages/api/endpoint/getbasicsearch_api.js

@@ -42,6 +42,8 @@ export default async function ApiProxy(req, res) {
     var searchString = req.query.searchString;
     var token = await getToken();
 
+    searchString = searchString.replace(/\'/g, "''");
+
     var queryUrl =
         "incidents?$select=description,numberofchildincidents,_accountid_value,_customerid_value,_pinswg_associatedlpa_value,_ownerid_value,pinswg_appealcasetype,statuscode,ticketnumber,title, _primarycontactid_value,pinswg_lpareference&$expand=primarycontactid($select=fullname)&$filter=(contains(title, '" +
         searchString +

pages/api/endpoint/getbasicsearchpaged_api.js

@@ -76,6 +76,8 @@ export default async function ApiProxy(req, res) {
     var fieldSort = req.query.fieldSort;
     var showNumberOfRecords = req.query.showNumberOfRecords;
 
+    searchString = searchString.replace(/\'/g, "''");
+
     var queryUrl =
         "incidents?$select=description,numberofchildincidents,_accountid_value,_customerid_value,_pinswg_associatedlpa_value,_ownerid_value,pinswg_appealcasetype,statuscode,ticketnumber,title, _primarycontactid_value,pinswg_lpareference&$expand=primarycontactid($select=fullname)&$filter=(contains(title, '" +
         searchString +

pages/api/endpoint/getpartsavedappeal_api.js

@@ -25,6 +25,8 @@ export default async function ApiProxy(req, res) {
     var searchString = req.query.searchString;
     var token = await getToken();
 
+    searchString = searchString.replace(/\'/g, "''");
+
     var queryUrl =
         "incidents?$select=description,numberofchildincidents,_accountid_value,_customerid_value,_pinswg_associatedlpa_value,_ownerid_value,pinswg_appealcasetype,statuscode,ticketnumber,title, _primarycontactid_value,pinswg_lpareference&$expand=primarycontactid($select=fullname)&$filter=(contains(title, '" +
         searchString +