Fix referer escaping

2026-03-11 16:43:04 +00:00 · 2019-05-03 12:15:21 -05:00
parent 757ea93393
commit ad8750b40d
6 changed files with 6 additions and 6 deletions
--- a/src/invidious/views/delete_account.ecr
+++ b/src/invidious/views/delete_account.ecr
@@ -13,7 +13,7 @@
                </button>
            </div>
            <div class="pure-u-1-2">
-                <a class="pure-button" href="<%= referer %>">
+                <a class="pure-button" href="<%= URI.escape(referer) %>">
                    <%= translate(locale, "No") %>
                </a>
            </div>