Encode url parameter inside HTML

Fixes thumbor#7
geraldino2 · Dec 8, 2023 · e777e2a · e777e2a
1 parent 6dd7fde
commit e777e2a
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/thumborizeme/static/js/unclog.js b/thumborizeme/static/js/unclog.js
@@ -79,7 +79,7 @@
 
                 social.html('');
 
-                social.append('<a href="https://twitter.com/share" class="twitter-share-button" data-url="http://thumborize.me?url=' + url + '" data-text="' + tweet + '" data-hashtags="thumbor">Tweet</a>');
+                social.append('<a href="https://twitter.com/share" class="twitter-share-button" data-url="http://thumborize.me?url=' + encodeURIComponent(url) + '" data-text="' + encodeURIComponent(tweet) + '" data-hashtags="thumbor">Tweet</a>');
 
                 social.append('<div ' +
                     'class="fb-like" ' +