add xss protection

2020-04-26 12:38:45 +08:00 · 2020-04-26 12:38:45 +08:00 · 6c650199b4
parent b1dac37682
commit 6c650199b4
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/personal_projects_controller.rb
+++ b/app/controllers/personal_projects_controller.rb
@ -96,7 +96,7 @@ class PersonalProjectsController < ApplicationController
                    'url' => '/' + params[:locale] + params[:url],
                    'select_text' => select_text,
                    'search_text' => search_text,
-                    'search_value' => params[:keywords],
+                    'search_value' => params[:keywords].gsub(/\"/,''),
                    'csrf_value' => csrf_value },
      'total_pages' => projects_total_pages,
      'choice' => choice