add xss protection to search

2020-04-26 12:35:04 +08:00 · 2020-04-26 12:35:04 +08:00 · de87338508
parent a4a38201a6
commit de87338508
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/personal_journals_controller.rb
+++ b/app/controllers/personal_journals_controller.rb
@ -116,7 +116,7 @@ class PersonalJournalsController < ApplicationController
                    'url' => '/' + I18n.locale.to_s + params[:url],
                    'select_text' => select_text,
                    'search_text' => search_text,
-                    'search_value' => params[:keywords],
+                    'search_value' => params[:keywords].gsub(/\"/,''),
                    'csrf_value' => csrf_value },
      'total_pages' => journal_papers_total_pages,
      'choice' => choice