api/v2: enable escaping of search string

RTradeLtd · Mar 3, 2020 · 83eee21 · 83eee21
1 parent 683317e
commit 83eee21
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/api/v2/routes_database.go b/api/v2/routes_database.go
@@ -1,6 +1,7 @@
 package v2
 
 import (
+	"html"
 	"net/http"
 
 	"github.com/RTradeLtd/Temporal/eh"
@@ -20,6 +21,8 @@ func (api *API) searchUploadsForUser(c *gin.Context) {
 		FailWithMissingField(c, missingField)
 		return
 	}
+	// escape string
+	forms["search_query"] = html.UnescapeString(forms["search_query"])
 	if c.Query("paged") == "true" {
 		api.pageIt(
 			c,