Fix referer escaping

This commit is contained in:
Omar Roth
2019-05-03 12:15:21 -05:00
parent 757ea93393
commit ad8750b40d
6 changed files with 6 additions and 6 deletions

View File

@@ -3,7 +3,7 @@
<% end %>
<div class="h-box">
<form class="pure-form pure-form-aligned" enctype="multipart/form-data" action="/data_control?referer=<%= referer %>" method="post">
<form class="pure-form pure-form-aligned" enctype="multipart/form-data" action="/data_control?referer=<%= URI.escape(referer) %>" method="post">
<fieldset>
<legend><%= translate(locale, "Import") %></legend>