Escape fields before passing to JS

2022-08-03 07:20:30 +01:00
parent 83b6285931
commit 5cc04863ac
2 changed files with 12 additions and 7 deletions
--- a/core/templates/ui/drilldown/drilldown.html
+++ b/core/templates/ui/drilldown/drilldown.html
@@ -5,7 +5,12 @@
  <script>
    function populateSearch(field, value) {
      var queryElement = document.getElementById('query');
-      var toAppend = ` AND ${field}: ${value}`;
+      var present = true;
+      if (present == true) {
+        var toAppend = ` AND ${field}: "${value}"`;
+      } else {
+        var toAppend = ` AND NOT ${field}: "${value}"`;
+      }
      if (!queryElement.value.includes(toAppend)) {
        queryElement.value+=toAppend;
      } else {