Correctly escape search query

gitlabhq · Nov 4, 2013 · 6d8b0bb · 6d8b0bb
1 parent 8a5bf01
commit 6d8b0bb
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/app/contexts/search_context.rb b/app/contexts/search_context.rb
@@ -6,7 +6,8 @@ def initialize(project_ids, params)
   end
 
   def execute
-    query = Shellwords.shellescape(params[:search])
+    query = params[:search]
+    query = Shellwords.shellescape(query) if query.present?
 
     return result unless query.present?