openrat-cms

commit 377ea4a7e1adc40108f8201c64f9b44124023373
parent c534f4f6860c73a989df7931137aa2a7314a5723
Author: Jan Dankert <devnull@localhost>
Date:   Tue, 11 Dec 2018 00:56:52 +0100

Das Escaping des '&' hat an vielen Stellen Probleme bereitet. Ausgebaut! Dann soll der W3C-Validator halt meckern.

Diffstat:
modules/util/Html.class.php
 | 
5
++++-

1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/modules/util/Html.class.php b/modules/util/Html.class.php
@@ -100,7 +100,10 @@ class Html
 			{
 				$urlParameterList[] = urlencode($var).'='.urlencode($value);
 			}
-			$urlParameter = '?'.implode('&',$urlParameterList);
+
+			// We do not escape '&' as '&' here, as it would brake things like Ajax-Urls.
+            // Maybe the escaping should be controled by a parameter.
+			$urlParameter = '?'.implode('&',$urlParameterList);
 		}
 		else
 		{