[jbpm-issues] [JBoss JIRA] Resolved: (JBPM-2902) Parameterize TaskQueryImpl values

Parameterize TaskQueryImpl values --------------------------------- Key: JBPM-2902 URL: https://jira.jboss.org/browse/JBPM-2902 Project: jBPM Issue Type: Bug Security Level: Public(Everyone can see) Affects Versions: jBPM 4.3 Reporter: Nick Stuart Assignee: Huisheng Xu Fix For: jBPM 4.5 Attachments: 2902-patch.txt Currently all values except for groups and assignee are simply concatenated onto the query, this is pretty dangerous and breaks items when it should. For example I have a task name with a ' in the name, and if I try to query for that task I get an HQL error because it's not properly terminated.