如何从url查询参数检查rails params hash包含双引号字符串？

Question

I created a GET endpoint to serve an API using rails. I want to be able to check for when the user passes double quotes for the query parameter in the url.

So for example the user could call the below endpoint by passing the query parameter with double quotes or no quotes. My application is expected to behave differently if the double quotes are found in the query params..

localhost:8080/company/data.json?q="America Online in UK"&size=10

Now the user can also call the endpoint with no double quotes like this:

localhost:8080/company/data.json?q=America+Online+in+UK&size=10

OR

localhost:8080/company/data.json?q=AOL&size=10

How do I handle the above use-cases in a rails controller with respect to spaces and double quotes?

Answer 1

Try with request.fullpath . Also, the content of params[:q] should change to show the escaped characters:

http://localhost:3000/?q=hello

request.fullpath
# => "/?q=hello"
params[:q]
# => "hello"



http://localhost:3000/?q=hello+world

request.fullpath
# => "/?q=hello+world"
params[:q]
# => "hello world"



http://localhost:3000/?q="hello world"

request.fullpath
# => "/?q=%22hello%20world%22"
params[:q]
# => "\"hello world\""

Further answer as requested in comment:

require "uri" # not required inside Rails

raw = "/?q=%22hello%20world%22"
clean = URI.unescape(raw)
# => "/?q=\"hello world\""

pattern = /\A\/\?q\=\"(.*)\"\z/
clean.match(pattern)[1]
# => "hello world"

A more practical method:

def query
  if (q = params[:q]).present? && with_quotes?(q)
    q.gsub("\"", "")
  end
end


def with_quotes?(string)
  string =~ /\A\"/
end