Escape user-supplied regex terms (#17305)

This commit is contained in:
Jamie Gaskins 2022-04-15 10:18:16 -04:00 committed by GitHub
parent 63c3229e36
commit 16c49a5df2
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -45,7 +45,7 @@ module Settings
def self.trigger_spam_for?(text:)
return false if spam_trigger_terms.empty?
regexp = Regexp.new("(#{spam_trigger_terms.join('|')})", true)
regexp = Regexp.new("(#{spam_trigger_terms.map { |term| Regexp.escape(term) }.join('|')})", true)
regexp.match?(text)
end
end