Land #1882, fix for CVE search from @jlee-r7

2013-05-29 17:00:32 -05:00 · 2013-05-29 17:00:32 -05:00 · fff51e2e0c
parent f76a50ae38 12f0448bb4
commit fff51e2e0c
1 changed files with 2 additions and 2 deletions
--- a/lib/msf/core/db_manager.rb
+++ b/lib/msf/core/db_manager.rb
@ -666,11 +666,11 @@ class DBManager
            formatted_values = value_set.collect { |value|
              prefix = keyword.upcase

-              "#{prefix}-#{value}"
+              "#{prefix}-%#{value}%"
            }

            query = query.includes(:refs)
-            union_conditions << Mdm::Module::Ref.arel_table[:name].eq_any(formatted_values)
+            union_conditions << Mdm::Module::Ref.arel_table[:name].matches_any(formatted_values)
        end
      end