Use EncodeURIComponent in setChangePassword.

2026-04-29 19:40:33 +02:00
parent 213e3e5c6d
commit b0ce21defe
1 changed files with 1 additions and 1 deletions
@@ -397,7 +397,7 @@ function setChangePassword(username) {
    if(!(a instanceof HTMLAnchorElement))
        throw new Error('Bad type for chpwspan');
    if(username) {
-        a.href = `/change-password.html?group=${encodeURI(group)}&username=${encodeURI(username)}`;
+        a.href = `/change-password.html?group=${encodeURIComponent(group)}&username=${encodeURIComponent(username)}`;
        a.target = '_blank';
        s.classList.remove('invisible');
    } else {