summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>2013-10-31 11:25:08 +0200
committerJacob Vosmaer <contact@jacobvosmaer.nl>2013-11-04 12:01:54 +0100
commit8a5bf011ab4af5ce98ee91fd5bbcc5d8cc874e0e (patch)
treee44fec490199d0a6b965331b3aa92662d124a8b4
parent6c067380fcdda6013498dafbc441691d4c20796a (diff)
downloadgitlab-ce-8a5bf011ab4af5ce98ee91fd5bbcc5d8cc874e0e.tar.gz
Shell escape code search
-rw-r--r--app/contexts/search_context.rb2
1 files changed, 1 insertions, 1 deletions
diff --git a/app/contexts/search_context.rb b/app/contexts/search_context.rb
index 22cda709f69..742ab025a28 100644
--- a/app/contexts/search_context.rb
+++ b/app/contexts/search_context.rb
@@ -6,7 +6,7 @@ class SearchContext
end
def execute
- query = params[:search]
+ query = Shellwords.shellescape(params[:search])
return result unless query.present?