VladPolskiy/postgres-web
1
0
Fork 0
mirror of https://github.com/postgres/pgweb.git synced 2025-08-06 09:57:57 +00:00
Code Issues Packages Projects Releases Wiki Activity

Don't crash on an incorrectly quoted suburl parameter

Browse Source
This commit is contained in:
Magnus Hagander
2018-12-16 16:10:40 +01:00
parent 915aa6ea31
commit fb7c904c0b
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
pgweb/search/views.py
View File

@ -289,10 +289,17 @@ def search(request):
hits = curs.fetchall() hits = curs.fetchall()
conn.close() conn.close()
totalhits = int(hits[-1][5]) totalhits = int(hits[-1][5])
try:
if quoted_suburl:
quoted_suburl = urllib.quote_plus(suburl)
else:
quoted_suburl = ''
except:
quoted_suburl = ''
querystr = "?q=%s&a=%s&u=%s" % ( querystr = "?q=%s&a=%s&u=%s" % (
urllib.quote_plus(query.encode('utf-8')), urllib.quote_plus(query.encode('utf-8')),
allsites and "1" or "0", allsites and "1" or "0",
suburl and urllib.quote_plus(suburl) or '', quoted_suburl,
) )
return render(request, 'search/sitesearch.html', { return render(request, 'search/sitesearch.html', {