tracker: Properly escape SPARQL arguments

diff --git a/src/plugins/tracker/rygel-tracker-metadata-values.vala b/src/plugins/tracker/rygel-tracker-metadata-values.vala
index e97140d..0f41db1 100644 (file)
--- a/src/plugins/tracker/rygel-tracker-metadata-values.vala
+++ b/src/plugins/tracker/rygel-tracker-metadata-values.vala
@@ -178,7 +178,7 @@ public abstract class Rygel.Tracker.MetadataValues : Rygel.SimpleContainer {
     }
 
     protected virtual string create_filter (string variable, string value) {
-        return variable + " = \"" + value + "\"";
+        return variable + " = \"" + Query.escape_string (value) + "\"";
     }
 
     private bool is_our_child (string id) {