Shell escape code search

8a5bf011 · Dmitriy Zaporozhets · Jacob Vosmaer (GitLab) · 6c067380 · 8a5bf011
Commit 8a5bf011 authored 11 years ago by Dmitriy Zaporozhets Committed by Jacob Vosmaer (GitLab) 11 years ago
--- a/app/contexts/search_context.rb
+++ b/app/contexts/search_context.rb
@@ -6,7 +6,7 @@ class SearchContext
  end
  
  def execute
-    query = params[:search]
+    query = Shellwords.shellescape(params[:search])
  
    return result unless query.present?