Skip to content

Commit 8beb99e

Browse files
committed
BUGFIX: Use multi_match instead of query_string
By using ``multi_match`` instead of ``query_string`` within our search query, we prevent the accidental injection of Lucene search query strings. Currently an exception is thrown when adding ``"`` to your search query. Using ``multi_match`` instead should lead to the same quality of results and is less prone to user errors, because in 99% of cases the search is used for classic search terms and no end user is expected to know the compact Lucene query string syntax. see: https://www.elastic.co/guide/en/elasticsearch/reference/5.6/query-dsl-multi-match-query.html see: https://www.elastic.co/guide/en/elasticsearch/reference/5.6/query-dsl-query-string-query.html see: https://www.elastic.co/guide/en/elasticsearch/reference/5.6/query-dsl-query-string-query.html#query-string-syntax
1 parent 618da54 commit 8beb99e

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Classes/Driver/Version5/Query/FilteredQuery.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -60,7 +60,7 @@ public function from(int $size): void
6060
public function fulltext(string $searchWord, array $options = []): void
6161
{
6262
$this->appendAtPath('query.bool.must', [
63-
'query_string' => array_merge($options, [
63+
'multi_match' => array_merge($options, [
6464
'query' => $searchWord,
6565
'fields' => ['__fulltext*']
6666
])

0 commit comments

Comments
 (0)