From 2cc4befb12e07ac420f18c0b5cebe92d05746fce Mon Sep 17 00:00:00 2001 From: Matthieu Gautier Date: Wed, 9 Mar 2022 15:44:19 +0100 Subject: [PATCH] Correctly display searchpattern in search result page. The `searchPattern` is already "diples encoded". So we can simply using it without protecting us from script injection. Fix #723 --- static/templates/search_result.html | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/static/templates/search_result.html b/static/templates/search_result.html index b52c9c3d3..c0ec3b02e 100644 --- a/static/templates/search_result.html +++ b/static/templates/search_result.html @@ -107,11 +107,11 @@ of {{count}} for - {{searchPattern}} + "{{{searchPattern}}}" {{/hasResults}} {{^hasResults}} - No results were found for {{searchPattern}} + No results were found for "{{{searchPattern}}}" {{/hasResults}}