[Bps-public-commit] r20175 - RT-BugTracker/html/Dist/Elements

[ruz at bestpractical.com]

Author: ruz
Date: Wed Dec  2 03:00:24 2009
New Revision: 20175

Modified:
   RT-BugTracker/html/Dist/Elements/Tabs

Log:
* escape name of the current user before putting it into a URL

Modified: RT-BugTracker/html/Dist/Elements/Tabs
==============================================================================
--- RT-BugTracker/html/Dist/Elements/Tabs	(original)
+++ RT-BugTracker/html/Dist/Elements/Tabs	Wed Dec  2 03:00:24 2009
@@ -54,12 +54,15 @@
 &>
 
 <%INIT>
-my $current_toptab = "Dist/ByMaintainer.html?Name=" . $session{'CurrentUser'}->UserObj->Name;
+my $escaped_uname = $m->interp->apply_escapes(
+    $session{'CurrentUser'}->UserObj->Name, 'u'
+);
+my $current_toptab = "Dist/ByMaintainer.html?Name=$escaped_uname";
 
 my $tabs = {
     A => {
         title => loc('My Distributions'),
-        path => 'Dist/ByMaintainer.html?Name=' . $session{'CurrentUser'}->UserObj->Name,
+        path => "Dist/ByMaintainer.html?Name=$escaped_uname",
     },
     B => {
         title => loc('Search'),