From 6c8069c65ada8f5ee2d7c3f925136156152e6f65 Mon Sep 17 00:00:00 2001 From: Maja Komel Date: Sun, 6 Jan 2019 23:12:02 +0100 Subject: [PATCH] FIX: properly escape embed url --- app/models/topic_embed.rb | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/app/models/topic_embed.rb b/app/models/topic_embed.rb index 9284c41a76a..5258eac2635 100644 --- a/app/models/topic_embed.rb +++ b/app/models/topic_embed.rb @@ -209,7 +209,7 @@ class TopicEmbed < ActiveRecord::Base def self.topic_id_for_embed(embed_url) embed_url = normalize_url(embed_url).sub(/^https?\:\/\//, '') - TopicEmbed.where("embed_url ~* '^https?://#{Regexp.escape(embed_url)}$'").pluck(:topic_id).first + TopicEmbed.where("embed_url ~* ?", "^https?://#{Regexp.escape(embed_url)}$").pluck(:topic_id).first end def self.first_paragraph_from(html)