Escape URL parameter for safety

2026-05-14 21:14:45 -07:00
parent 4fa30e782e
commit 8159fad28f
1 changed files with 2 additions and 1 deletions
@@ -82,7 +82,8 @@ else {
 			$out =~ s/^.*Content-type:.*\n//i;
 			$out =~ s/http:\/\///ig;
 			$out =~ s/\?/\?sec=/ig;
-			$out =~ s/\+/&opts=$in{'opts'}&page=/ig;
+			$eopts = &html_escape($in{'opts'});
+			$out =~ s/\+/&opts=$eopts&page=/ig;
 			$out =~ s/<HTML>.*<BODY>//isg;
 			$out =~ s/<\/HTML>//ig;
 			$out =~ s/<\/BODY>//ig;