talons

commit 76749107d9c34aa0ae7d9e8358742565006b21af
parent 569fdb0a7ca201733b12cda840e8abef1433ec59
Author: Ricardo Mones <ricardo@mones.org>
Date:   Tue, 19 Jun 2018 11:12:02 +0200

Default mode URL should be escaped before using it

Diffstat:
M
src/plugins/libravatar/libravatar.c
 | 
8
+++++---

1 file changed, 5 insertions(+), 3 deletions(-)
diff --git a/src/plugins/libravatar/libravatar.c b/src/plugins/libravatar/libravatar.c
@@ -210,9 +210,11 @@ static gchar *libravatar_url_for_md5(const gchar *base, const gchar *md5)
 				base, md5, AVATAR_SIZE,
 				def_mode[libravatarprefs.default_mode - 10]);
 	} else if (libravatarprefs.default_mode == DEF_MODE_URL) {
-		return g_strdup_printf("%s/%s?s=%u&d=%s",
-				base, md5, AVATAR_SIZE,
-				libravatarprefs.default_mode_url);
+		gchar *escaped = g_uri_escape_string(libravatarprefs.default_mode_url, "/", TRUE);
+		gchar *url = g_strdup_printf("%s/%s?s=%u&d=%s",
+				base, md5, AVATAR_SIZE, escaped);
+		g_free(escaped);
+		return url;
 	} else if (libravatarprefs.default_mode == DEF_MODE_NONE) {
 		return g_strdup_printf("%s/%s?s=%u",
 				base, md5, AVATAR_SIZE);