Browse Source

Merge pull request #2257 from Solirs/fix_bad_escape

re.escape() the query in highlight_content to prevent a server side error.
Markus Heiser 2 years ago
parent
commit
677903c355
1 changed files with 3 additions and 1 deletions
  1. 3 1
      searx/webutils.py

+ 3 - 1
searx/webutils.py

@@ -174,7 +174,9 @@ def highlight_content(content, query):
             queries.extend(re.findall(regex_highlight_cjk(qs), content, flags=re.I | re.U))
             queries.extend(re.findall(regex_highlight_cjk(qs), content, flags=re.I | re.U))
     if len(queries) > 0:
     if len(queries) > 0:
         for q in set(queries):
         for q in set(queries):
-            content = re.sub(regex_highlight_cjk(q), f'<span class="highlight">{q}</span>', content)
+            content = re.sub(
+                regex_highlight_cjk(q), f'<span class="highlight">{q}</span>'.replace('\\', r'\\'), content
+            )
     return content
     return content