Merge pull request #141 from Pita/patch-1

Fixed security issue
asual · Aug 15, 2012 · c1a4b3e · c1a4b3e
2 parents 38b3ac0 + a9f95e5
commit c1a4b3e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/jquery.address.js b/src/jquery.address.js
@@ -122,7 +122,7 @@
             },
             _html = function() {
                 var src = _js() + ':' + FALSE + ';document.open();document.writeln(\'<html><head><title>' + 
-                    _d.title.replace(/\'/g, '\\\'') + '</title><script>var ' + ID + ' = "' + _href() + 
+                    _d.title.replace(/\'/g, '\\\'') + '</title><script>var ' + ID + ' = "' + encodeURIComponent(_href()).replace(/\'/g, '\\\'') + 
                     (_d.domain != _l.hostname ? '";document.domain="' + _d.domain : '') + 
                     '";</' + 'script></head></html>\');document.close();';
                 if (_version < 7) {