Shell escape code search

Dmitriy Zaporozhets
1 parent 1bace9da
Showing 1 changed file with 1 additions and 1 deletions Show diff stats
app/contexts/search_context.rb
@@ -6,7 +6,7 @@ class SearchContext
   end
  
   def execute
-    query = params[:search]
+    query = Shellwords.shellescape(params[:search])
  
     return result unless query.present?
...	...	@@ -6,7 +6,7 @@ class SearchContext
6	6	end
7	7
8	8	def execute
9		- query = params[:search]
	9	+ query = Shellwords.shellescape(params[:search])
10	10
11	11	return result unless query.present?
12	12
...	...