From 82f4736ad29ec8972749ebcbd860de4247feaca3 Mon Sep 17 00:00:00 2001
From: Pierre Goiffon <pierre.goiffon@combodo.com>
Date: Tue, 17 May 2022 15:13:24 +0200
Subject: [PATCH] =?UTF-8?q?N=C2=B04921=20Fix=20cannot=20find=20object=20wh?=
 =?UTF-8?q?en=20attvalue=20contains=20special=20cars=20Sanitization=20filt?=
 =?UTF-8?q?er=20wasn't=20set,=20so=20we=20were=20filtering=20a=20bit=20too?=
 =?UTF-8?q?=20much=20:/?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 pages/UI.php | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/pages/UI.php b/pages/UI.php
index ee69312df..d3a7abb11 100644
--- a/pages/UI.php
+++ b/pages/UI.php
@@ -14,7 +14,6 @@ use Combodo\iTop\Application\UI\Base\Component\GlobalSearch\GlobalSearchHelper;
 use Combodo\iTop\Application\UI\Base\Component\Input\InputUIBlockFactory;
 use Combodo\iTop\Application\UI\Base\Component\Panel\PanelUIBlockFactory;
 use Combodo\iTop\Application\UI\Base\Component\QuickCreate\QuickCreateHelper;
-use Combodo\iTop\Application\UI\Base\Component\Title\Title;
 use Combodo\iTop\Application\UI\Base\Component\Title\TitleUIBlockFactory;
 use Combodo\iTop\Application\UI\Base\Component\Toolbar\ToolbarUIBlockFactory;
 use Combodo\iTop\Application\UI\Base\Layout\PageContent\PageContentFactory;
@@ -359,8 +358,8 @@ try
 					$oObj = MetaModel::GetObjectByName($sClass, $id, false /* MustBeFound */);
 				}
 			} else {
-				$sAttCode = utils::ReadParam('attcode', '');
-				$sAttValue = utils::ReadParam('attvalue', '');
+				$sAttCode = utils::ReadParam('attcode', '', false, utils::ENUM_SANITIZATION_FILTER_FIELD_NAME);
+				$sAttValue = utils::ReadParam('attvalue', '', false, utils::ENUM_SANITIZATION_FILTER_RAW_DATA);
 
 				if ((strlen($sAttCode) === 0) || (strlen($sAttValue) === 0)) {
 					throw new ApplicationException(Dict::Format('UI:Error:1ParametersMissing', 'id'));