cleanses user's queries.

src/clj/auto_ap/graphql/vendors.clj

@@ -5,6 +5,7 @@
    [auto-ap.graphql.utils
     :refer [->graphql
             <-graphql
+            cleanse-query
             assert-admin
             assert-failure
             enum->keyword
@@ -148,19 +149,19 @@
                                  (:id args))))
 
 (defn search [context args _]
-  (let [data (if (is-admin? (:id context))
+  (let [search-query (cleanse-query (:query args))
+        data (if (is-admin? (:id context))
                (d/q '[:find ?n ?i ?s
                       :in $ ?q
                       :where [(fulltext $ :vendor/search-terms ?q) [[?i ?n _ ?s]]]]
                     (d/db conn)
-                    (:query args))
+                    search-query)
                (d/q '[:find ?n ?i ?s
                       :in $ ?q
                       :where [(fulltext $ :vendor/search-terms ?q) [[?i ?n _ ?s]]]
                       (not [?i :vendor/hidden true])]
                     (d/db conn)
-                    (:query args)))]
-    
+                    search-query))]
     (->> data
          (sort-by (comp - last))
          (map (fn [[n i]]