From: Andrew Dolgov <fox@madoka.volgo-balt.ru>
Date: Fri, 12 Jul 2013 10:15:03 +0000 (+0400)
Subject: viewfeed: properly escape feed in ajax query
X-Git-Tag: 1.9~30
X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=d9e78984fb3977e268a09fdcc485689c04ee5688;p=tt-rss.git

viewfeed: properly escape feed in ajax query
---

diff --git a/js/feedlist.js b/js/feedlist.js
index 222fbcbe..7f60194d 100644
--- a/js/feedlist.js
+++ b/js/feedlist.js
@@ -95,7 +95,7 @@ function viewfeed(feed, method, is_cat, offset, background, infscroll_req, can_w
 
 		var toolbar_query = Form.serialize("main_toolbar_form");
 
-		var query = "?op=feeds&method=view&feed=" + feed + "&" +
+		var query = "?op=feeds&method=view&feed=" + param_escape(feed) + "&" +
 			toolbar_query;
 
 		if (method) {