escape find values in url

This commit is contained in:
j 2017-11-16 17:25:52 +01:00
commit 8c25aceb67
6 changed files with 13 additions and 10 deletions

View file

@ -586,7 +586,7 @@ pandora.ui.infoView = function(data) {
function formatLink(key, value, linkValue) {
return (Ox.isArray(value) ? value : [value]).map(function(value) {
return key
? '<a href="/' + key + '=' + (linkValue ? linkValue : value) + '">' + value + '</a>'
? '<a href="/' + key + '=' + pandora.escapeQueryValue(linkValue ? linkValue : value) + '">' + value + '</a>'
: value;
}).join(', ');
}