Merge pull request #48 from sproutsocial/fix-re-injection

Update views.py
sproutsocial · Aug 28, 2024 · ffbd47d · ffbd47d
2 parents c04dc21 + 7175ba7
commit ffbd47d
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/webapp/ui/views.py b/webapp/ui/views.py
@@ -128,9 +128,9 @@ def prepare_source_line(query_re, srcline, html=True):
 def get_query_re(query, case_sensitive=True):
     try:
         if case_sensitive:
-            return re.compile(r'(' + query + r')')
+            return re.compile(r'(' + re.escape(query) + r')')
         else:
-            return re.compile(r'(' + query + r')', flags=re.IGNORECASE)
+            return re.compile(r'(' + re.escape(query) + r')', flags=re.IGNORECASE)
     except Exception as e:
         raise RegexError(e)