feat: Maybe stop XSS

COS301-SE-2024 · Sep 29, 2024 · b19567d · b19567d
1 parent d77b644
commit b19567d
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 1 deletion.
diff --git a/frontend/package.json b/frontend/package.json
@@ -36,6 +36,7 @@
     "clsx": "^2.1.1",
     "cypress-file-upload": "^5.0.8",
     "framer-motion": "^11.3.30",
+    "he": "^1.2.0",
     "input-otp": "^1.2.4",
     "jwt-decode": "^4.0.0",
     "lucide-react": "^0.412.0",

diff --git a/frontend/src/app/archive/search/page.tsx b/frontend/src/app/archive/search/page.tsx
@@ -26,6 +26,7 @@ import {
 import { useRef } from "react";
 import SearchFilters from "./filters";
 import { Badge } from "@/components/ui/badge";
+import { escape } from "querystring";
 
 const searchSchema = z.object({
   q: z.string().optional(),
@@ -85,7 +86,7 @@ export default async function ArchiveSearch({ searchParams }: { searchParams: un
   if (!params.q) {
     redirect("/archive");
   }
-
+  params.q = escape(params.q)
   const { data, error } = await searchArchive({
     search: params.q,
     offset: params.offset * PAGE_SIZE,