Index: openacs-4/packages/xowiki/tcl/syndicate-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xowiki/tcl/syndicate-procs.tcl,v
diff -u -r1.51.2.11 -r1.51.2.12
--- openacs-4/packages/xowiki/tcl/syndicate-procs.tcl	28 Sep 2020 21:04:04 -0000	1.51.2.11
+++ openacs-4/packages/xowiki/tcl/syndicate-procs.tcl	19 Oct 2021 08:19:13 -0000	1.51.2.12
@@ -121,7 +121,9 @@
         # without causing a SQL error.
         set form_items [list -1]
       }
-      append extra_where_clause " and p.page_template in ('[join $form_items ',']') and p.page_instance_id = p.revision_id "
+      append extra_where_clause [subst {
+        and p.page_template in ([ns_dbquotelist $form_items]) and p.page_instance_id = p.revision_id
+      }] " "
 
       set :base_table xowiki_form_pagex
     }
Index: openacs-4/packages/xowiki/tcl/weblog-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xowiki/tcl/weblog-procs.tcl,v
diff -u -r1.75.2.18 -r1.75.2.19
--- openacs-4/packages/xowiki/tcl/weblog-procs.tcl	27 Aug 2020 11:20:08 -0000	1.75.2.18
+++ openacs-4/packages/xowiki/tcl/weblog-procs.tcl	19 Oct 2021 08:19:13 -0000	1.75.2.19
@@ -124,18 +124,20 @@
       if {[string match "::*" ${:entries_of}]} {
         # class names were provided as a filter
         set class_clause \
-            " and ci.content_type in ('[join [split ${:entries_of} { }] ',']')"
+            [subst { and ci.content_type in ([ns_dbquotelist [split ${:entries_of} { }]]) }]
       } else {
         if {[regexp {^[0-9 ]+$} ${:entries_of}]} {
           # form item_ids were provided as a filter
           set :form_ids ${:entries_of}
         } else {
           # form names provided as a filter
-          set :form_ids [::${:package_id} instantiate_forms \
-                             -forms ${:entries_of}]
+          set :form_ids [::${:package_id} instantiate_forms -forms ${:entries_of}]
         }
         if {${:form_ids} ne ""} {
-          append extra_where_clause " and bt.page_template in ('[join ${:form_ids} ',']') and bt.page_instance_id = bt.revision_id "
+          append extra_where_clause [subst {
+            and bt.page_template in ([ns_dbquotelist ${:form_ids}])
+            and bt.page_instance_id = bt.revision_id
+          }]
         } else {
           error "could not lookup forms ${:entries_of}"
         }
Index: openacs-4/packages/xowiki/tcl/xowiki-procs.tcl
===================================================================
RCS file: /usr/local/cvsroot/openacs-4/packages/xowiki/tcl/xowiki-procs.tcl,v
diff -u -r1.542.2.113 -r1.542.2.114
--- openacs-4/packages/xowiki/tcl/xowiki-procs.tcl	16 Oct 2021 14:45:40 -0000	1.542.2.113
+++ openacs-4/packages/xowiki/tcl/xowiki-procs.tcl	19 Oct 2021 08:19:13 -0000	1.542.2.114
@@ -4308,7 +4308,7 @@
               :msg "ignoring unknown variable $lhs_var in expression"
             }
           } elseif {[llength $rhs]>1} {
-            lappend sql_clause "$lhs_var in ('[join $rhs ',']')"
+            lappend sql_clause "$lhs_var in ([ns_dbquotelist $rhs])"
             # the following statement is only needed, when we rely on tcl-only
             lappend tcl_clause "\[lsearch -exact {$rhs} \[:property $lhs\]\] > -1"
           } else {