Escape the query argument provided to `git grep` by `search_files`

Closes #14963.
This commit is contained in:
Robert Speicher 2016-04-09 18:40:15 -04:00
parent 600b94cd8b
commit 5ffa8f0570
2 changed files with 7 additions and 1 deletions

View File

@ -795,7 +795,7 @@ class Repository
def search_files(query, ref)
offset = 2
args = %W(#{Gitlab.config.git.bin_path} grep -i -I -n --before-context #{offset} --after-context #{offset} -e #{query} #{ref || root_ref})
args = %W(#{Gitlab.config.git.bin_path} grep -i -I -n --before-context #{offset} --after-context #{offset} -e #{Regexp.escape(query)} #{ref || root_ref})
Gitlab::Popen.popen(args, path_to_repo).first.scrub.split(/^--$/)
end

View File

@ -94,6 +94,12 @@ describe Repository, models: true do
it { is_expected.to be_an Array }
it 'regex-escapes the query string' do
results = repository.search_files("test\\", 'master')
expect(results.first).not_to start_with('fatal:')
end
describe 'result' do
subject { results.first }