Quotes in tag names break reverse search

[Vincent-CIRCL]

Hi,

I currently use your tool (DataTurks) to classify a private dataset.
We noticed a small issue with the current state of your tool : quotes in tags are breaking the search by tags.

It could imply that your software is not correctly escaping quotes and so is vulnerable to SQLi. This is just a guess, however.

Questions :

• Are you already aware of this issue ?
• Do you have a workaround or a fix on a functional side to make the search work with quotes in tags ?
• If you are aware or if SQLi are confirmed, are you planning to fix the issue on a security side ?

Thanks for your involvement and your tool. It saving us a lot time.
Have a very nice day