diff options
| author | chris <chris@jalakai.co.uk> | 2006-11-05 14:58:05 +0100 |
|---|---|---|
| committer | chris <chris@jalakai.co.uk> | 2006-11-05 14:58:05 +0100 |
| commit | 67cf9a098ec0c4e56817fb5b01e77544a472b78a (patch) | |
| tree | 2858ef24cca8f0fe0b0105b99af4a8821f421065 /lib | |
| parent | c5b85cc545ded3ffcb9cc6079486ea7b50eebdc3 (diff) | |
| download | rpg-67cf9a098ec0c4e56817fb5b01e77544a472b78a.tar.gz rpg-67cf9a098ec0c4e56817fb5b01e77544a472b78a.tar.bz2 | |
use encodeURIComponent instead of encodeURI for variable values
darcs-hash:20061105135805-9b6ab-c1d7835b9920402389a2d12a309582adae0872a5.gz
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/scripts/edit.js | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/lib/scripts/edit.js b/lib/scripts/edit.js index ada70194d..077069a5a 100644 --- a/lib/scripts/edit.js +++ b/lib/scripts/edit.js @@ -338,7 +338,7 @@ function changeCheck(msg){ var dwform = $('dw__editform'); if(dwform){ var params = 'call=draftdel'; - params += '&id='+dwform.elements.id.value; + params += '&id='+encodeURIComponent(dwform.elements.id.value); var sackobj = new sack(DOKU_BASE + 'lib/exe/ajax.php'); sackobj.AjaxFailedAlert = ''; @@ -499,13 +499,13 @@ var locktimer = new locktimer_class(); var now = new Date(); // refresh every minute only if(now.getTime() - locktimer.lasttime.getTime() > 30*1000){ //FIXME decide on time - var params = 'call=lock&id='+encodeURI(locktimer.pageid); + var params = 'call=lock&id='+encodeURIComponent(locktimer.pageid); if(locktimer.draft){ var dwform = $('dw__editform'); - params += '&prefix='+encodeURI(dwform.elements.prefix.value); - params += '&wikitext='+encodeURI(dwform.elements.wikitext.value); - params += '&suffix='+encodeURI(dwform.elements.suffix.value); - params += '&date='+encodeURI(dwform.elements.date.value); + params += '&prefix='+encodeURIComponent(dwform.elements.prefix.value); + params += '&wikitext='+encodeURIComponent(dwform.elements.wikitext.value); + params += '&suffix='+encodeURIComponent(dwform.elements.suffix.value); + params += '&date='+encodeURIComponent(dwform.elements.date.value); } locktimer.sack.runAJAX(params); locktimer.lasttime = now; |