escape field name when using it in regex

BlueGreenMagick · Oct 9, 2023 · e3d3eea · e3d3eea
1 parent 7ff6dd2
commit e3d3eea
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/addon/configwindow.py b/src/addon/configwindow.py
@@ -126,13 +126,13 @@ def modify_field_editability(
         for side in ["qfmt", "afmt"]:
             if field["edit"] == Editability.ALL:
                 template[side] = re.sub(
-                    "{{((?:(?!edit:)[^#/:}]+:)*%s)}}" % field["name"],
+                    "{{((?:(?!edit:)[^#/:}]+:)*%s)}}" % re.escape(field["name"]),
                     r"{{edit:\1}}",
                     template[side],
                 )
             elif field["edit"] == Editability.NONE:
                 template[side] = re.sub(
-                    "{{((?:[^#/:}]+:)*)edit:((?:[^#/:}]+:)*%s)}}" % field["name"],
+                    "{{((?:[^#/:}]+:)*)edit:((?:[^#/:}]+:)*%s)}}" % re.escape(field["name"]),
                     r"{{\1\2}}",
                     template[side],
                 )