From 831de081dacd4d8a289be51223dd9d267da116ba Mon Sep 17 00:00:00 2001
From: Jan Schneider <jan@horde.org>
Date: Fri, 15 Oct 2010 13:08:32 +0200
Subject: [PATCH] URLs in href attributes must always be htmlencoded.

---
 framework/Url/lib/Horde/Url.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/framework/Url/lib/Horde/Url.php b/framework/Url/lib/Horde/Url.php
index 2c6661d48..02422fd37 100644
--- a/framework/Url/lib/Horde/Url.php
+++ b/framework/Url/lib/Horde/Url.php
@@ -280,7 +280,7 @@ class Horde_Url
      */
     public function link(array $attributes = array())
     {
-        $url = (string)$this;
+        $url = (string)$this->setRaw(false);
         $link = '<a';
         if (!empty($url)) {
             $link .= " href=\"$url\"";
-- 
2.11.0