fix(query): escape special chars in path (#1185)

src/runtime/composables/query.ts

@@ -39,7 +39,9 @@ export function queryContent<T = ParsedContent>(query: string, ...pathParts: str
 export function queryContent<T = ParsedContent> (query: QueryBuilderParams): QueryBuilder<T>;
 export function queryContent<T = ParsedContent> (query?: string | QueryBuilderParams, ...pathParts: string[]) {
   if (typeof query === 'string') {
-    const path = withLeadingSlash(withoutTrailingSlash(joinURL(query, ...pathParts)))
+    let path = withLeadingSlash(withoutTrailingSlash(joinURL(query, ...pathParts)))
+    // escape regex special chars
+    path = path.replace(/[-[\]{}()*+.,^$\s]/g, '\\$&')
 
     return createQuery<T>(queryFetch).where({ _path: new RegExp(`^${path}`) })
   }

src/runtime/server/storage.ts

@@ -128,6 +128,9 @@ export function serverQueryContent<T = ParsedContent> (event: CompatibilityEvent
   let params = (path || {}) as Partial<QueryBuilderParams>
   if (typeof path === 'string') {
     path = withLeadingSlash(joinURL(path, ...pathParts))
+    // escape regex special chars
+    path = path.replace(/[-[\]{}()*+.,^$\s]/g, '\\$&')
+
     params = {
       where: [{ _path: new RegExp(`^${path}`) }]
     }

test/basic.test.ts

@@ -99,6 +99,10 @@ describe('fixtures:basic', async () => {
     expect(html).not.contains('<meta name="description" content="Description overwritten"><meta property="og:image" content="https://picsum.photos/200/300">')
   })
 
+  test('partial:specials-chars', async () => {
+    const html = await $fetch('/_partial/content-(v2)')
+    expect(html).contains('Content (v2)')
+  })
   testNavigation()
 
   testMarkdownParser()

test/fixtures/basic/content/_partial/content (v2).md

@@ -0,0 +1 @@
+# Content (v2)