Security Fix again, thanks to Yasin Soliman

Gemfile.lock

@@ -1,7 +1,7 @@
 PATH
   remote: .
   specs:
-    gemirro (0.14.0)
+    gemirro (0.15.0)
       builder (~> 3.2)
       confstruct (~> 1.0)
       erubis (~> 2.7)

lib/gemirro/server.rb

@@ -1,5 +1,6 @@
 require 'sinatra/base'
 require 'thin'
+require 'uri'
 
 module Gemirro
   ##
@@ -271,6 +272,16 @@ def spec_for(gemname, version, platform = 'ruby')
       def escape(string)
         Rack::Utils.escape_html(string)
       end
+
+      ##
+      # Homepage link
+      #
+      # @param [Gem] spec
+      # @return [String]
+      #
+      def homepage(spec)
+        URI.parse(URI.escape(spec.homepage))
+      end
     end
   end
 end

views/gem.erb

@@ -31,7 +31,7 @@
             <ul class="list-group">
               <% spec.authors.each do |author| %>
                 <li class="list-group-item">
-                  <a href="<%= escape(spec.homepage) %>"><%= escape(author) %></a>
+                  <a href="<%= homepage(spec) %>"><%= escape(author) %></a>
                 </li>
               <% end %>
             </ul>