add xss protection

2020-04-26 12:39:31 +08:00 · 2020-04-26 12:39:31 +08:00 · ee134378b6
parent 8202a92098
commit ee134378b6
1 changed files with 1 additions and 1 deletions
--- a/app/controllers/personal_books_controller.rb
+++ b/app/controllers/personal_books_controller.rb
@ -118,7 +118,7 @@ class PersonalBooksController < ApplicationController
                    'url' => '/' + params[:locale] + params[:url],
                    'select_text' => select_text,
                    'search_text' => search_text,
-                    'search_value' => params[:keywords],
+                    'search_value' => params[:keywords].gsub(/\"/,''),
                    'csrf_value' => csrf_value },
      'headers' => headers,
      'total_pages' => books_total_pages,