FIX: properly escape embed url

discourse · Jan 7, 2019 · 6c8069c · 6c8069c · tgxworld · Jan 8, 2019
1 parent e0bc826
commit 6c8069c
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/models/topic_embed.rb b/app/models/topic_embed.rb
@@ -209,7 +209,7 @@ def self.absolutize_urls(url, contents)
 
   def self.topic_id_for_embed(embed_url)
     embed_url = normalize_url(embed_url).sub(/^https?\:\/\//, '')
-    TopicEmbed.where("embed_url ~* '^https?://#{Regexp.escape(embed_url)}$'").pluck(:topic_id).first
+    TopicEmbed.where("embed_url ~* ?", "^https?://#{Regexp.escape(embed_url)}$").pluck(:topic_id).first
   end
 
   def self.first_paragraph_from(html)