doc_name is not encoded when used to build url for update.

[ozomer]

See:
https://github.com/dscape/nano/blob/master/nano.js#L841

I suggest to wrap it with encodeURIComponent(doc_name).
This is relevant, for example, when the document ids contain slashes.

This may even be a security issue if the user has a limited access to a service that calls updates, and he tells the service to update a document with id that begin with "../../" (I'm not sure if this will actually work and make the service call other DB functions).

[dscape]

Can you re-open sending a pull request including tests.

Thank you :)