Escaping regex characters from user input before searching for groups. (#10092)

fixes #9953
2018-03-17 14:25:50 -07:00
parent fef8929dd9
commit 3ad0ffcaec
2 changed files with 17 additions and 3 deletions
@@ -336,7 +336,7 @@ api.getGroups = {

    if (req.query.search) {
      filters.$or = [];
-      const searchWords = req.query.search.split(' ').join('|');
+      const searchWords = _.escapeRegExp(req.query.search).split(' ').join('|');
      const searchQuery = { $regex: new RegExp(`${searchWords}`, 'i') };
      filters.$or.push({name: searchQuery});
      filters.$or.push({description: searchQuery});