Escape regexp. Closes #13.

refinery · Jan 9, 2012 · 2cd70c6 · 2cd70c6
1 parent f579d8f
commit 2cd70c6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/views/search/show.html.erb b/app/views/search/show.html.erb
@@ -9,7 +9,7 @@
         <span class='result_type'>
           <%= result.class.to_s.titleize %>
         </span>
-        <%= link_to raw(result.title.gsub(/(#{params[:query]})/i,'<mark>\1</mark>')), result_url(result) %>
+        <%= link_to raw(result.title.gsub(/(#{Regexp.escape(params[:query])})/i, '<mark>\1</mark>')), result_url(result) %>
       </li>
     <% end %>
   </ul>