Escaping user input for search queries

Elastic Stack Elasticsearch
1

In mysql/mariadb you have the escape_string for making user input search strings more secure.

What is the best way to escape user input or make the user input safer when searching with match and match_all and taking user input ?

is there a good way to escape user input and make it more secure?

2

There is a way not to report error messages with https://www.elastic.co/guide/en/elasticsearch/reference/1.7/query-dsl-simple-query-string-query.html

but i am looking for a good way to make user input more secure

3

Do you have an example of something unsecured?

4

No i do not, but it is scary to have no escaping or sanitization for user input

5

So why do you think it's unsecured then?

6

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.