From 3acf78b77e22f7c6ca8646ddbae71accb1133cf4 Mon Sep 17 00:00:00 2001
From: maxpozdeev <maxpozdeev@gmail.com>
Date: Mon, 12 May 2025 15:52:24 +0300
Subject: [PATCH] * Remove restriction on having some characters (<, >, &, ',
 ") in list names (closes GH-108)

---
 src/includes/api/ListsController.php | 8 +++-----
 src/includes/class.dbcore.php        | 2 +-
 2 files changed, 4 insertions(+), 6 deletions(-)

diff --git a/src/includes/api/ListsController.php b/src/includes/api/ListsController.php
index 44eec47..98ae2f2 100644
--- a/src/includes/api/ListsController.php
+++ b/src/includes/api/ListsController.php
@@ -215,11 +215,9 @@ class ListsController extends ApiController {
         $db = DBConnection::instance();
         $t = array();
         $t['total'] = 0;
-        $name = str_replace(
-            array('"',"'",'<','>','&'),
-            array('','','','',''),
-            trim($this->req->jsonBody['name'] ?? '')
-        );
+        $name = trim($this->req->jsonBody['name'] ?? '');
+        if ($name == '')
+            return $t;
         $db->dq("UPDATE {$db->prefix}lists SET name=?,d_edited=? WHERE id=$id", array($name, time()) );
         $t['total'] = $db->affected();
         $r = $db->sqa("SELECT * FROM {$db->prefix}lists WHERE id=$id");
diff --git a/src/includes/class.dbcore.php b/src/includes/class.dbcore.php
index eafd8f1..942a58c 100644
--- a/src/includes/class.dbcore.php
+++ b/src/includes/class.dbcore.php
@@ -175,7 +175,7 @@ class DBCore
     function createListWithName(string $name): ?int
     {
         $db = DBConnection::instance();
-        $name = str_replace( ['"',"'",'<','>','&'], '', trim($name) );
+        $name = trim($name);
         if ($name == '') {
             return null;
         }