We don't quite want to fix this at the moment, as currently it allows
passing of elasticsearch parameters in the query, which we rely on for
testing, and for which is the only way to filter results in some ways
currently. For example "price:0.00" will show all the free apps and
"name:com.ubuntu.terminal" will show only the terminal app. Escaping
characters would break many of the options here.

We previously had a proposed branch to fix this, but we did not merge it
for these reasons.

** Changed in: unity-scope-click (Ubuntu)
   Importance: Medium => Low

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1234336

Title:
  Search queries are not escaped

To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-devices-system-image/+bug/1234336/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to