Merge pull request #298 from nextcloud/use-parameterized-query

[stable9] Use paramterized parameter for \OC\SystemTag\SystemTagManager

Author: MorrisJobke

lib/private/systemtag/systemtagmanager.php

@@ -124,10 +124,7 @@ public function getAllTags($visibilityFilter = null, $nameSearchPattern = null)
 
 		if (!empty($nameSearchPattern)) {
 			$query->andWhere(
-				$query->expr()->like(
-					'name',
-					$query->expr()->literal('%' . $this->connection->escapeLikeParameter($nameSearchPattern). '%')
-				)
+				$query->expr()->like('name', $query->createNamedParameter('%' . $this->connection->escapeLikeParameter($nameSearchPattern) . '%'))
 			);
 		}