Shell escape code search

a476bc7b · Dmitriy Zaporozhets · 1bace9da · a476bc7b
隐藏空白更改
内联并排

Showing with 1 addition and 1 deletion

app/contexts/search_context.rb app/contexts/search_context.rb +1 -1

未找到文件。
--- a/app/contexts/search_context.rb
+++ b/app/contexts/search_context.rb
@@ -6,7 +6,7 @@ class SearchContext
  end
  def execute
-    query = params[:search]
+    query = Shellwords.shellescape(params[:search])
    return result unless query.present?