Merge pull request #555 from return42/fix-autocomplete

[fix] route /autocompleter: escape '<' and '>' in the response
This commit is contained in:
Markus Heiser 2021-11-27 09:24:58 +01:00 committed by GitHub
commit f0db33e14b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -916,6 +916,7 @@ def autocompleter():
suggestions = json.dumps([sug_prefix, results])
mimetype = 'application/x-suggestions+json'
suggestions = escape(suggestions, False)
return Response(suggestions, mimetype=mimetype)