From c24f7f6f0b87a87f6dd3755f69eb0969ebb029c9 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?=E6=B2=88=E5=94=81?= <52o@qq52o.cn> Date: Mon, 12 Apr 2021 09:47:39 +0800 Subject: [PATCH] fix: Add escapeHtml for search (#1551) Co-authored-by: Anix --- src/plugins/search/search.js | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/src/plugins/search/search.js b/src/plugins/search/search.js index 94047c2e..ce7481c5 100644 --- a/src/plugins/search/search.js +++ b/src/plugins/search/search.js @@ -178,7 +178,7 @@ export function search(query) { keywords.forEach(keyword => { // From https://github.com/sindresorhus/escape-string-regexp const regEx = new RegExp( - ignoreDiacriticalMarks(keyword).replace( + escapeHtml(ignoreDiacriticalMarks(keyword)).replace( /[|\\{}()[\]^$+*?.]/g, '\\$&' ), @@ -187,10 +187,10 @@ export function search(query) { let indexTitle = -1; let indexContent = -1; handlePostTitle = postTitle - ? ignoreDiacriticalMarks(postTitle) + ? escapeHtml(ignoreDiacriticalMarks(postTitle)) : postTitle; handlePostContent = postContent - ? ignoreDiacriticalMarks(postContent) + ? escapeHtml(ignoreDiacriticalMarks(postContent)) : postContent; indexTitle = postTitle ? handlePostTitle.search(regEx) : -1;