Commit 8beb99e
committed
BUGFIX: Use multi_match instead of query_string
By using ``multi_match`` instead of ``query_string`` within our search
query, we prevent the accidental injection of Lucene search query
strings. Currently an exception is thrown when adding ``"`` to your search query.
Using ``multi_match`` instead should lead to the same quality of results
and is less prone to user errors, because in 99% of cases the search is
used for classic search terms and no end user is expected to know the
compact Lucene query string syntax.
see: https://www.elastic.co/guide/en/elasticsearch/reference/5.6/query-dsl-multi-match-query.html
see: https://www.elastic.co/guide/en/elasticsearch/reference/5.6/query-dsl-query-string-query.html
see: https://www.elastic.co/guide/en/elasticsearch/reference/5.6/query-dsl-query-string-query.html#query-string-syntax1 parent 618da54 commit 8beb99e
1 file changed
+1
-1
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
60 | 60 | | |
61 | 61 | | |
62 | 62 | | |
63 | | - | |
| 63 | + | |
64 | 64 | | |
65 | 65 | | |
66 | 66 | | |
| |||
0 commit comments