From a5eb14d28e13e9896cb61ec79b16776e801436ce Mon Sep 17 00:00:00 2001 From: Markus Lude Date: Tue, 25 Oct 2016 20:08:45 +0200 Subject: [PATCH] UriEscape(): better use white listing than black listing mostly from GunnarH, mentioned on WikiBugs/NonEnglishRSS --- wiki.pl | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wiki.pl b/wiki.pl index 4044929..eb92b4f 100755 --- a/wiki.pl +++ b/wiki.pl @@ -1853,7 +1853,7 @@ sub EvalLocalRules { sub UriEscape { my ($uri) = @_; - $uri =~ s/([\x00-\x1f\x7f-\xff])/sprintf("%%%02X", ord($1))/ge; + $uri =~ s/([^\w\-.!~*'()\&])/sprintf("%%%02X", ord($1))/ge; $uri =~ s/\&/\&/g; return $uri; }