Commit d494e5ca authored by Dominik Hebeler's avatar Dominik Hebeler

Merge branch '950-quicktips-search-query-not-properly-escaped' into 'development'

Resolve "Quicktips Search Query Not Properly Escaped"

Closes #950

See merge request !1558
parents 84a1090e ced476e1
......@@ -267,8 +267,13 @@ class MetaGerSearch extends Controller
->with('tips', $tips);
}
public function quicktips($search)
public function quicktips(Request $request)
{
$search = $request->input('search', '');
if(empty($search)){
abort(404);
}
$quicktips = new \App\Models\Quicktips\Quicktips($search);
return view('quicktips')
->with('quicktips', $quicktips->getResults())
......
......@@ -196,7 +196,7 @@ Route::group(
Route::get('pluginClose', 'LogController@pluginClose');
Route::get('pluginInstall', 'LogController@pluginInstall');
Route::get('qt/{eingabe}', 'MetaGerSearch@quicktips');
Route::get('qt', 'MetaGerSearch@quicktips');
Route::get('tips', 'MetaGerSearch@tips');
Route::get('/plugins/opensearch.xml', 'StartpageController@loadPlugin');
Route::get('owi', function () {
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment