Ticket #5694: 5694.patch

src/bp-members/bp-members-template.php

@@ -457 +457 @@
         // Pass a filter if ?s= is set.
         if ( is_null( $search_terms ) ) {
                 if ( !empty( $_REQUEST['s'] ) )
-                        $search_terms = $_REQUEST['s'];
+                        $search_terms = esc_html( $_REQUEST['s'] );
                 else
                         $search_terms = false;
         }

src/bp-templates/bp-legacy/js/buddypress.js

@@ -1679 +1679 @@
                 search_terms = bp_get_querystring('s');
         }
 
+        // "JS sanitize" search terms
+        if ( search_terms.length ) {
+                search_terms = escape( search_terms.split( '&' ).join( '&' ) );
+        }
+
         if ( null === scope ) {
                 scope = 'all';
         }