Fix referer escaping

2026-02-26 02:09:41 +00:00 · 2019-05-03 12:15:21 -05:00
parent 757ea93393
commit ad8750b40d
6 changed files with 6 additions and 6 deletions
--- a/src/invidious/views/subscription_manager.ecr
+++ b/src/invidious/views/subscription_manager.ecr
@@ -19,7 +19,7 @@
    </div>
    <div class="pure-u-1-3" style="text-align:right">
        <h3>
-            <a href="/data_control?referer=<%= referer %>">
+            <a href="/data_control?referer=<%= URI.escape(referer) %>">
                <%= translate(locale, "Import/export") %>
            </a>
        </h3>