From afd01dc2d74b455d18c09d89e7f00c1180867588 Mon Sep 17 00:00:00 2001 From: JustOff Date: Sun, 14 Oct 2018 14:02:41 +0300 Subject: [PATCH] Sanitize single-quotes in search queries --- content/list.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/content/list.js b/content/list.js index 8e90022..d08cd2b 100644 --- a/content/list.js +++ b/content/list.js @@ -99,7 +99,7 @@ let List = { } if (search != "") { cq1 += ""; - cq2 += "addons.name LIKE '%" + search + "%' AND "; + cq2 += "addons.name LIKE '%" + search.replace(/'/g, "_") + "%' AND "; } else { cq1 += ""; cq2 += "1 AND "; }