[FIX] mail: composer: escape RegExp pattern

to prevent crashes if the user types, e.g. a \, when mentionning someone.
yasmanycastillo · May 2, 2016 · 5cca1dc · 5cca1dc
1 parent da82207
commit 5cca1dc
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/addons/mail/static/src/js/composer.js b/addons/mail/static/src/js/composer.js
@@ -619,7 +619,7 @@ var BasicComposer = Widget.extend({
             // filter prefetched partners with the given search string
             var suggestions = [];
             var limit = self.options.mention_fetch_limit;
-            var search_regexp = new RegExp(self.unaccent(search), 'i');
+            var search_regexp = new RegExp(_.str.escapeRegExp(self.unaccent(search)), 'i');
             _.each(prefetched_partners, function (partners) {
                 if (limit > 0) {
                     var filtered_partners = _.filter(partners, function (partner) {