Correctly escape search query

6d8b0bbb · Dmitriy Zaporozhets · Jacob Vosmaer · 8a5bf011 · 6d8b0bbb
Commit 6d8b0bbb authored Oct 31, 2013 by Dmitriy Zaporozhets Committed by Jacob Vosmaer Nov 04, 2013
Show whitespace changes
Inline Side-by-side

Showing with 2 additions and 1 deletion

app/contexts/search_context.rb app/contexts/search_context.rb +2 -1

No files found.
--- a/app/contexts/search_context.rb
+++ b/app/contexts/search_context.rb
@@ -6,7 +6,8 @@ class SearchContext
  end

  def execute
-    query = Shellwords.shellescape(params[:search])
+    query = params[:search]
+    query = Shellwords.shellescape(query) if query.present?

    return result unless query.present?