Strip MySQL fulltext boolean mode operators from search terms

Search terms are passed into a MySQL `MATCH(...) AGAINST(? IN BOOLEAN
MODE)` query. In boolean mode MySQL has its own mini-syntax with the
operators `+ - > < ( ) ~ * " @`. When user input contains one of these
(for example the `@` proximity operator in a string like `icu4c@78`),
MySQL's fulltext parser throws a 1064 syntax error instead of treating
the input as data.

`escapeSearchTerm()` only stripped `" * ( ) :`, leaving `@ + - ~ < >`
intact. Add the remaining operators, and replace stripped operators with
a space rather than removing them so each side becomes its own search
term (every driver already splits the escaped term on whitespace before
building its query).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: freekmurze

src/Drivers/Database/Grammar.php

@@ -14,11 +14,9 @@ abstract public function getTotalCount(Connection $connection, string $indexName
 
     public function escapeSearchTerm(string $query): string
     {
-        $escaped = str_replace(
-            ['"', '*', '(', ')', ':'],
-            ['', '', '', '', ''],
-            $query
-        );
+        $booleanModeOperators = ['"', '*', '(', ')', ':', '@', '+', '-', '~', '<', '>'];
+
+        $escaped = str_replace($booleanModeOperators, ' ', $query);
 
         $escaped = preg_replace('/\b(OR|AND|NOT)\b/i', '', $escaped);
 

tests/Drivers/Database/GrammarTest.php

@@ -7,9 +7,27 @@
 
 it('escapes dangerous characters from search terms', function (Grammar $grammar) {
     expect($grammar->escapeSearchTerm('"hello"'))->toBe('hello');
-    expect($grammar->escapeSearchTerm('hello*world'))->toBe('helloworld');
-    expect($grammar->escapeSearchTerm('test(group)'))->toBe('testgroup');
-    expect($grammar->escapeSearchTerm('field:value'))->toBe('fieldvalue');
+    expect($grammar->escapeSearchTerm('hello*world'))->toBe('hello world');
+    expect($grammar->escapeSearchTerm('test(group)'))->toBe('test group');
+    expect($grammar->escapeSearchTerm('field:value'))->toBe('field value');
+})->with([
+    'sqlite' => fn () => new SqliteGrammar,
+    'mysql' => fn () => new MySqlGrammar,
+    'postgres' => fn () => new PostgresGrammar,
+]);
+
+it('strips mysql boolean mode operators that would break the query', function (Grammar $grammar) {
+    expect($grammar->escapeSearchTerm('icu4c@78'))->toBe('icu4c 78');
+    expect($grammar->escapeSearchTerm('rank>up'))->toBe('rank up');
+    expect($grammar->escapeSearchTerm('rank<down'))->toBe('rank down');
+    expect($grammar->escapeSearchTerm('~negate'))->toBe('negate');
+
+    // The real-world path that triggered the crash on freek.dev should no longer
+    // contain any boolean mode operator that breaks MySQL's fulltext parser.
+    $path = '/System/Volumes/Preboot/Cryptexes/OS/opt/homebrew/opt/icu4c@78/lib/libicuio.78.dylib';
+    expect($grammar->escapeSearchTerm($path))
+        ->not->toContain('@')
+        ->not->toContain('-');
 })->with([
     'sqlite' => fn () => new SqliteGrammar,
     'mysql' => fn () => new MySqlGrammar,