viewfeed: properly escape feed in ajax query

diff --git a/js/feedlist.js b/js/feedlist.js
index 222fbcbe06bc8683ddf8c2ccfd9f24cf92d21572..7f60194dc799828a9fc3f279d7acf8d3e0c05586 100644 (file)
--- a/js/feedlist.js
+++ b/js/feedlist.js
@@ -95,7 +95,7 @@ function viewfeed(feed, method, is_cat, offset, background, infscroll_req, can_w
 
                var toolbar_query = Form.serialize("main_toolbar_form");
 
-               var query = "?op=feeds&method=view&feed=" + feed + "&" +
+               var query = "?op=feeds&method=view&feed=" + param_escape(feed) + "&" +
                        toolbar_query;
 
                if (method) {