Escape regexp.

stAndrei · Jan 9, 2012 · 7387052 · 7387052
1 parent 86efe3b
commit 7387052
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/views/refinery/search/show.html.erb b/app/views/refinery/search/show.html.erb
@@ -9,7 +9,7 @@
         <span class='result_type'>
           <%= result.class.to_s.titleize %>
         </span>
-        <%= link_to raw(result.title.gsub(/(#{params[:query]})/i,'<mark>\1</mark>')), result_url(result) %>
+        <%= link_to raw(result.title.gsub(/(#{Regexp.escape(params[:query])})/i, '<mark>\1</mark>')), result_url(result) %>
       </li>
     <% end %>
   </ul>