From b0ce21defea75c719e0157df7e2db7be61977472 Mon Sep 17 00:00:00 2001
From: Juliusz Chroboczek <jch@irif.fr>
Date: Wed, 29 Apr 2026 19:40:33 +0200
Subject: [PATCH] Use EncodeURIComponent in setChangePassword.

---
 static/galene.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/static/galene.js b/static/galene.js
index 8bc5e2a..6d9eb12 100644
--- a/static/galene.js
+++ b/static/galene.js
@@ -397,7 +397,7 @@ function setChangePassword(username) {
     if(!(a instanceof HTMLAnchorElement))
         throw new Error('Bad type for chpwspan');
     if(username) {
-        a.href = `/change-password.html?group=${encodeURI(group)}&username=${encodeURI(username)}`;
+        a.href = `/change-password.html?group=${encodeURIComponent(group)}&username=${encodeURIComponent(username)}`;
         a.target = '_blank';
         s.classList.remove('invisible');
     } else {