diff options
author | Andrew Dolgov <[email protected]> | 2021-02-07 21:09:27 +0300 |
---|---|---|
committer | Andrew Dolgov <[email protected]> | 2021-02-07 21:09:27 +0300 |
commit | c1ad7acfb97489c44c52b6955e930c3466630284 (patch) | |
tree | 37aee95d9d24aa79fae83f0d4c051f0ea9f748fe | |
parent | 41fc03287e889d4dc7ac60a93832b79065c041cb (diff) |
bookmarklet: encode URL properly so special characters won't get lost
-rw-r--r-- | plugins/bookmarklets/init.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/plugins/bookmarklets/init.php b/plugins/bookmarklets/init.php index 3b13ef10d..fa1bb8cf6 100644 --- a/plugins/bookmarklets/init.php +++ b/plugins/bookmarklets/init.php @@ -19,7 +19,7 @@ class Bookmarklets extends Plugin { function hook_prefs_tab($args) { if ($args == "prefFeeds") { - print "<div dojoType=\"dijit.layout.AccordionPane\" + print "<div dojoType=\"dijit.layout.AccordionPane\" title=\"<i class='material-icons'>bookmark</i> ".__('Bookmarklets')."\">"; print "<h3>" . __("Drag the link below to your browser toolbar, open the feed you're interested in in your browser and click on the link to subscribe to it.") . "</h3>"; @@ -28,7 +28,7 @@ class Bookmarklets extends Plugin { $confirm_str = str_replace("'", "\'", __('Subscribe to %s in Tiny Tiny RSS?')); - $bm_url = htmlspecialchars("javascript:{if(confirm('$confirm_str'.replace('%s',window.location.href)))window.location.href='$bm_subscribe_url'+window.location.href}"); + $bm_url = htmlspecialchars("javascript:{if(confirm('$confirm_str'.replace('%s',window.location.href)))window.location.href='$bm_subscribe_url'+encodeURIComponent(window.location.href)}"); print "<p><label class='dijitButton'>"; print "<a href=\"$bm_url\">" . __('Subscribe in Tiny Tiny RSS'). "</a>"; |