viewfeed: properly escape feed in ajax query

11 years ago · d9e78984fb
parent e21ea11c50
commit d9e78984fb
1 changed files with 1 additions and 1 deletions
--- a/js/feedlist.js
+++ b/js/feedlist.js
@ -95,7 +95,7 @@ function viewfeed(feed, method, is_cat, offset, background, infscroll_req, can_w
 		var toolbar_query = Form.serialize("main_toolbar_form");
-		var query = "?op=feeds&method=view&feed=" + feed + "&" +
+		var query = "?op=feeds&method=view&feed=" + param_escape(feed) + "&" +
 			toolbar_query;
 		if (method) {