Preventive measure against search ingestion (#8777)

We were not vulnerable to it, but here is an additional layer of security against search ingestions, in particular in public user queries, where someone could try to ingest a search like `) OR (interesting`
This commit is contained in:
Alexandre Alapetite
2026-05-08 09:04:57 +02:00
committed by GitHub
parent d03efaed6b
commit a1c637e7ac

View File

@@ -24,6 +24,8 @@ class FreshRSS_BooleanSearch implements \Stringable {
bool $expandUserQueries = true
) {
$input = trim($input);
$input = ltrim($input, ' )');
$input = rtrim($input, ' (\\');
if ($input === '') {
return;
}