From d9e78984fb3977e268a09fdcc485689c04ee5688 Mon Sep 17 00:00:00 2001 From: Andrew Dolgov Date: Fri, 12 Jul 2013 14:15:03 +0400 Subject: [PATCH] viewfeed: properly escape feed in ajax query --- js/feedlist.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/js/feedlist.js b/js/feedlist.js index 222fbcbe..7f60194d 100644 --- a/js/feedlist.js +++ b/js/feedlist.js @@ -95,7 +95,7 @@ function viewfeed(feed, method, is_cat, offset, background, infscroll_req, can_w var toolbar_query = Form.serialize("main_toolbar_form"); - var query = "?op=feeds&method=view&feed=" + feed + "&" + + var query = "?op=feeds&method=view&feed=" + param_escape(feed) + "&" + toolbar_query; if (method) { -- 2.39.2