URL parameters should always be encodeURIComponent'd.

This commit is contained in:
Nicolas Stepien 2013-03-27 17:42:50 +01:00
parent 178fed05a4
commit 7ddb59862c

View File

@ -3093,13 +3093,13 @@ Sauce =
link = link.replace /%(T?URL|MD5|board)/g, (parameter) -> link = link.replace /%(T?URL|MD5|board)/g, (parameter) ->
switch parameter switch parameter
when '%TURL' when '%TURL'
"' + post.file.thumbURL + '" "' + encodeURIComponent(post.file.thumbURL) + '"
when '%URL' when '%URL'
"' + post.file.URL + '" "' + encodeURIComponent(post.file.URL) + '"
when '%MD5' when '%MD5'
"' + encodeURIComponent(post.file.MD5) + '" "' + encodeURIComponent(post.file.MD5) + '"
when '%board' when '%board'
"' + post.board + '" "' + encodeURIComponent(post.board) + '"
else else
parameter parameter
text = if m = link.match(/;text:(.+)$/) then m[1] else link.match(/(\w+)\.\w+\//)[1] text = if m = link.match(/;text:(.+)$/) then m[1] else link.match(/(\w+)\.\w+\//)[1]