opengovfoundation/the-madison-project — pull request #18 by bscott-govexec (2013-03-20 21:06:51+00:00)
Title: Bug fix: allow regular apostrophes in the document content

The comment field is being directly concatenated into the query when you update a document. This allowed apostrophes to break the query.

This fix addresses that issue but doesn't necessarily address the SQL injection concern around this method. I realize this is in the admin, but it still worries me.