[-] CORE : Report of https://github.com/PrestaShop/PrestaShop-1.4/commit/a6e8a2eda7fe3bab5245df9b98df7b2f6f7d541f

classes/SearchEngine.php

@@ -60,6 +60,8 @@ class SearchEngineCore extends ObjectModel
 				if (empty($array[0]))
 					return false;
 				$str = urldecode(str_replace('+', ' ', ltrim(substr(rtrim($array[0], '&'), strlen($varname) + 1), '=')));
+				if (!Validate::isMessage($str))
+					return false;				
 				return $str;
 			}
 		}