diff options
| author | Omar Roth <omarroth@hotmail.com> | 2019-02-22 20:35:37 -0600 |
|---|---|---|
| committer | Omar Roth <omarroth@hotmail.com> | 2019-02-22 20:35:37 -0600 |
| commit | bdc9196b4a5ac28ed31023790616e4d0ee48501d (patch) | |
| tree | fbb0df1d4a252d6f2d1455bc9cd73ff1346f4f65 /src | |
| parent | a283c3143d3707dabc3b225d50d600b022c4965f (diff) | |
| download | invidious-bdc9196b4a5ac28ed31023790616e4d0ee48501d.tar.gz invidious-bdc9196b4a5ac28ed31023790616e4d0ee48501d.tar.bz2 invidious-bdc9196b4a5ac28ed31023790616e4d0ee48501d.zip | |
Escape email when creating feed for Google account
Diffstat (limited to 'src')
| -rw-r--r-- | src/invidious/users.cr | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/invidious/users.cr b/src/invidious/users.cr index 072638ba..48d8008f 100644 --- a/src/invidious/users.cr +++ b/src/invidious/users.cr @@ -145,7 +145,7 @@ def get_user(sid, headers, db, refresh = true) view_name = "subscriptions_#{sha256(user.email)[0..7]}" PG_DB.exec("CREATE MATERIALIZED VIEW #{view_name} AS \ SELECT * FROM channel_videos WHERE \ - ucid = ANY ((SELECT subscriptions FROM users WHERE email = '#{user.email}')::text[]) \ + ucid = ANY ((SELECT subscriptions FROM users WHERE email = E'#{user.email.gsub("'", "\\'")}')::text[]) \ ORDER BY published DESC;") rescue ex end @@ -167,7 +167,7 @@ def get_user(sid, headers, db, refresh = true) view_name = "subscriptions_#{sha256(user.email)[0..7]}" PG_DB.exec("CREATE MATERIALIZED VIEW #{view_name} AS \ SELECT * FROM channel_videos WHERE \ - ucid = ANY ((SELECT subscriptions FROM users WHERE email = '#{user.email}')::text[]) \ + ucid = ANY ((SELECT subscriptions FROM users WHERE email = E'#{user.email.gsub("'", "\\'")}')::text[]) \ ORDER BY published DESC;") rescue ex end |