pages/watch: URL encode 'action' in download widget

Caught in the review of PR 5224, but forgot to click on "send review" in time. I realized that too late, after the PR was already merged.
This commit is contained in:
Samantaz Fox 2025-06-26 19:15:12 +00:00 committed by GitHub
parent df8839d1f0
commit 9be9ee4099
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -32,7 +32,7 @@ module Invidious::Frontend::WatchPage
return String.build(4000) do |str|
str << "<form"
str << " class=\"pure-form pure-form-stacked\""
str << " action='#{url}'"
str << " action='" << URI.encode_www_form(url) << "'"
str << " method='post'"
str << " rel='noopener'"
str << " target='_blank'>"