Protect queryString with encodeURI
This commit is contained in:
parent
e418ed6b9d
commit
2e844abc39
1 changed files with 3 additions and 3 deletions
|
|
@ -162,7 +162,7 @@ function update_row(ctl)
|
|||
{
|
||||
var jrn = g('p_jrn').value;
|
||||
var dossier = g('gDossier').value;
|
||||
var qs = 'gDossier=' + dossier + '&op=minrow&j=' + jrn + '&ctl=' + ctl;
|
||||
var qs = encodeURI('gDossier=' + dossier + '&op=minrow&j=' + jrn + '&ctl=' + ctl);
|
||||
var action = new Ajax.Request(
|
||||
"ajax_misc.php",
|
||||
{
|
||||
|
|
@ -917,7 +917,7 @@ function filter_card(obj, queryString)
|
|||
{
|
||||
queryString = queryString + '&j=' + jrn;
|
||||
}
|
||||
return queryString;
|
||||
return encodeURI(queryString);
|
||||
}
|
||||
/**
|
||||
*@brief to display the lettering for the operation, call
|
||||
|
|
@ -1058,7 +1058,7 @@ function op_save(obj)
|
|||
var action = new Ajax.Request('ajax_misc.php',
|
||||
{
|
||||
method: 'post',
|
||||
parameters: queryString,
|
||||
parameters: encodeURI(queryString),
|
||||
onFailure: null,
|
||||
onSuccess: infodiv
|
||||
}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue