Shell escape code search

2026-08-15 07:36:41 +10:00 · 2013-11-01 14:14:24 +02:00
parent 1bace9da9a
commit a476bc7bc7
1 changed files with 1 additions and 1 deletions
@@ -6,7 +6,7 @@ class SearchContext
  end

  def execute
-    query = params[:search]
+    query = Shellwords.shellescape(params[:search])

    return result unless query.present?