From: Michael M Slusarz <slusarz@curecanti.org>
Date: Tue, 10 Feb 2009 00:17:00 +0000 (-0700)
Subject: Correctly escape URLs.
X-Git-Url: https://git.internetallee.de/?a=commitdiff_plain;h=848d0acd7ef59c808511719fbea553a23ec3f662;p=horde.git

Correctly escape URLs.
---

diff --git a/imp/fetchmailprefs.php b/imp/fetchmailprefs.php
index f3535f5c3..ba2d268ea 100644
--- a/imp/fetchmailprefs.php
+++ b/imp/fetchmailprefs.php
@@ -187,9 +187,11 @@ if (empty($actionID)) {
 Prefs_UI::generateHeader(null, $chunk);
 Horde::addScriptFile('prototype.js', 'horde', true);
 Horde::addScriptFile('fetchmailprefs.js', 'imp', true);
+
+$charset = NLS::getCharset();
 IMP::addInlineScript(array(
-    'ImpFetchmailprefs.fetchurl = \'' . $fetch_url . '\'',
-    'ImpFetchmailprefs.prefsurl = \'' . $prefs_url . '\''
+    'ImpFetchmailprefs.fetchurl = ' . Horde_Serialize($fetch_url, SERIALIZE_JSON, $charset),
+    'ImpFetchmailprefs.prefsurl = ' . Horde_Serialize($prefs_url, SERIALIZE_JSON, $charset)
 ));
 
 echo $t->fetch(IMP_TEMPLATES . '/fetchmail/fetchmailprefs.html');