dovecot-2.2: http_url_escape_param(): Added more characters to b...

[dovecot at dovecot.org]

details:   http://hg.dovecot.org/dovecot-2.2/rev/fe66746d8a66
changeset: 16370:fe66746d8a66
user:      Timo Sirainen <tss at iki.fi>
date:      Sun May 19 22:30:52 2013 +0300
description:
http_url_escape_param(): Added more characters to be escaped.
Most importantly '+', which encodes a space normally. The others may not be
strictly necessary, but safer to escape them just in case.

diffstat:

 src/lib-http/http-url.c |  2 +-
 1 files changed, 1 insertions(+), 1 deletions(-)

diffs (10 lines):

diff -r 8ee30aa47930 -r fe66746d8a66 src/lib-http/http-url.c
--- a/src/lib-http/http-url.c	Sun May 19 19:55:41 2013 +0300
+++ b/src/lib-http/http-url.c	Sun May 19 22:30:52 2013 +0300
@@ -285,5 +285,5 @@
 
 void http_url_escape_param(string_t *out, const char *data)
 {
-	uri_append_query_data(out, "&;", data);
+	uri_append_query_data(out, "&;/?=+", data);
 }