Sanitize XPath for DB input

[Former Community Member]

Hello all

In my orchestration I have a Call Stored Procedure task that accepts a bunch of XPath expressions as its parameters (obviously)

The problem arises when the values contain apostrophes/single quotes like : ' insertion fails because they cause syntax errors on the DBMS

Is there an effectve way of "escaping" the apostrophes? I'm trying to use XSLT but the truth is I'm not an expert on that

What are the best practices for SQL sanitization using LiveCycle?

Thanks for your help

[Jasmin_Charbonn]

I usually use the parameterize option.

Your call will then look something like Call ProcedureName (?,?,?) .

You can them replace the ? with the xPath expression you want in the mapping section.

Let me know if that helps.

Jasmin