feat: escape single quote characters

packages/ra-cubicweb/src/createDataProvider.ts

@@ -57,9 +57,14 @@
 
     // Handle filters
     restrictions.push(
-      ...Object.entries(filter).map(([attrName, attrValue]) => {
-        return `EXISTS(X ${attrName} ~= '%${attrValue}%')`;
-      })
+      ...Object.entries(filter as Record<string, string>).map(
+        ([attrName, attrValue]) => {
+          return `EXISTS(X ${attrName} ~= '%${attrValue.replace(
+            "'",
+            "\\'"
+          )}%')`;
+        }
+      )
     );
 
     const total = await rqlClient