Sanitizing SOLR query before searching.

[minustehbare]

I've written a gem to include a number of helper methods that can help to sanitize bad user input by either escaping special characters or removing them entirely. The gem can be found here for reference https://github.com/minustehbare/solr-search-sanitizer

Special characters are defined by the Apache Lucene Query Parser Syntax documentation here: http://lucene.apache.org/java/2_4_0/queryparsersyntax.html

Default behavior that I defined for spree-solr-search is to merely escape as much as possible. The underlying assumption for the inclusion of this gem is that users on an ecommerce website performing searches do not intend to use advanced syntax and all search terms are to be taken 'at face value'.

[rounders]

@minustehbare -- I was looking for a fix for this :-) But the use of the solr-search-sanitizer gem does not work in ruby 1.8 spree stores because of the use of the use of gsub(pattern, hash)