From a8a544a2a205b42d2009b5c52d8939e8bc36263c Mon Sep 17 00:00:00 2001 From: Alexandre Alapetite Date: Sat, 13 Dec 2025 11:31:34 +0100 Subject: Fix search encoding and quoting (#8311) Revised the encoding approach for searches: the HTML encoding is done just before its use for DB search. Fix also some cases with wrong quoting. Fix https://github.com/FreshRSS/FreshRSS/pull/8306#issuecomment-3643865439 Follow-up of https://github.com/FreshRSS/FreshRSS/pull/8293 --- app/Models/Context.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'app/Models/Context.php') diff --git a/app/Models/Context.php b/app/Models/Context.php index be4a06cc8..cc1b77026 100644 --- a/app/Models/Context.php +++ b/app/Models/Context.php @@ -248,7 +248,7 @@ final class FreshRSS_Context { } } - self::$search = new FreshRSS_BooleanSearch(Minz_Request::paramString('search')); + self::$search = new FreshRSS_BooleanSearch(Minz_Request::paramString('search', plaintext: true)); $order = Minz_Request::paramString('order', plaintext: true) ?: FreshRSS_Context::userConf()->sort_order; self::$order = in_array($order, ['ASC', 'DESC'], true) ? $order : 'DESC'; $sort = Minz_Request::paramString('sort', plaintext: true) ?: FreshRSS_Context::userConf()->sort; -- cgit v1.2.3