Protect queryString with encodeURI

This commit is contained in:
Dany De Bontridder 2017-12-08 20:11:22 +01:00
parent e418ed6b9d
commit 2e844abc39

View file

@ -162,7 +162,7 @@ function update_row(ctl)
{
var jrn = g('p_jrn').value;
var dossier = g('gDossier').value;
var qs = 'gDossier=' + dossier + '&op=minrow&j=' + jrn + '&ctl=' + ctl;
var qs = encodeURI('gDossier=' + dossier + '&op=minrow&j=' + jrn + '&ctl=' + ctl);
var action = new Ajax.Request(
"ajax_misc.php",
{
@ -917,7 +917,7 @@ function filter_card(obj, queryString)
{
queryString = queryString + '&j=' + jrn;
}
return queryString;
return encodeURI(queryString);
}
/**
*@brief to display the lettering for the operation, call
@ -1058,7 +1058,7 @@ function op_save(obj)
var action = new Ajax.Request('ajax_misc.php',
{
method: 'post',
parameters: queryString,
parameters: encodeURI(queryString),
onFailure: null,
onSuccess: infodiv
}