search: escape apostrophes.

2022-11-18 16:55:15 -05:00 · 2022-11-18 16:55:15 -05:00 · 38ac92b4aa
parent 7fe499ce41
commit 38ac92b4aa
1 changed files with 1 additions and 0 deletions
--- a/files/routes/search.py
+++ b/files/routes/search.py
@ -216,6 +216,7 @@ def searchcomments(v):
 	if 'q' in criteria:
 		tokens = map(lambda x: re.sub(r'[\0():|&*!<>]', '', x), criteria['q'])
 		tokens = filter(lambda x: len(x) > 0, tokens)
+		tokens = map(lambda x: re.sub(r"'", "\\'", x), tokens)
 		tokens = map(lambda x: re.sub(r'\s+', ' <-> ', x), tokens)
 		comments = comments.filter(Comment.body_ts.match(
 			' & '.join(tokens),