url_quote the value of the web_arg. This prevent to break the argument with valu…

…e which contain some = or ' etc... like in sql query

url_quote the value of the web_arg. This prevent to break the argument with valu…
…e which contain some = or ' etc... like in sql query
totoro
1 parent 72f464e5
Showing 2 changed files with 3 additions and 2 deletions Show diff stats
web/CXM_multihost_http_server.anubis
web/CXM_web_action.anubis
@@ -2419,7 +2419,7 @@ define One
       with size = file_size(f),
       since split_filename_extension(absolute_path) is (filename, extension),
       with mime_type = get_MIME_from_extension("."+extension),
-      println("send file answer: "+filename+" ext: "+extension+ " uri :" +uri);
+      //println("send file answer: "+filename+" ext: "+extension+ " uri :" +uri);
       send_file(
         desc,
         connection,
@@ -9,6 +9,7 @@
 read system/string.anubis
 transmit calexium_lib/web/types/web_action_name.anubis
+transmit calexium_lib/web/CXM_urllib.anubis
 //public type WEB_Action_Name:
 //  controller_action(
 //    String  controller,
@@ -31,7 +32,7 @@ public define String
   if length(l_args) = 0 then 
     ""
   else
-    "&"+join("&", map(((String, String) arg) |-> since arg is (name, value), name+"="+value, l_args))
+    "&"+join("&", map(((String, String) arg) |-> since arg is (name, value), name+"="+url_quote(value), l_args))
 .
 public define String