Closed Bug 937165 Opened 11 years ago Closed 11 years ago

Searches that break ts_query give DatabaseErrors on search

Categories

(Webtools Graveyard :: Air Mozilla, defect, P2)

Product:
Webtools Graveyard
Component:
Air Mozilla
Platform:
x86
macOS
Type:
defect

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: peterbe, Assigned: peterbe)

References

Details

This for example:
https://errormill.mozilla.org/webtools/airmozilla-prod/group/143083/

Happens when someone searches for `"><img|src=x|onerror=prompt(1)>`
Priority: -- → P2
Here's another one that breaks it: `' OR sqlspider`
Commit pushed to master at https://github.com/mozilla/airmozilla

https://github.com/mozilla/airmozilla/commit/7e091f9ae7bff9e28b6a0268dfbb5cf9f0e1a36d
fixes bug 937165 - Searches that break ts_query give DatabaseErrors on search
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
This isn't handled correctly::

  1" onmouseover=prompt(931357) bad="
Status: RESOLVED → REOPENED
Resolution: FIXED → ---
Better paste hopefully: /search/?q=1"+onmouseover%3Dprompt(931357)+bad%3D"
Commit pushed to master at https://github.com/mozilla/airmozilla

https://github.com/mozilla/airmozilla/commit/3b252fcdf1a006594587cd1458336c7766124c12
fixes bug 937165 - Searches that break ts_query give DatabaseErrors on search
Status: REOPENED → RESOLVED
Closed: 11 years ago → 11 years ago
Resolution: --- → FIXED
Assignee: nobody → peterbe
Product: Webtools → Webtools Graveyard
You need to log in before you can comment on or make changes to this bug.