Fix security bug with missing encodeURI.

overload-development-community · Feb 17, 2020 · 4df99de · 4df99de
1 parent 030e404
commit 4df99de
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/public/views/index.js b/public/views/index.js
@@ -36,7 +36,7 @@ class IndexView {
                     <meta name="og:image" content="${protocol}://otl.gg/images/otl.png" />
                     <meta name="og:title" content="Overload Teams League" />
                     <meta name="og:type" content="website" />
-                    <meta name="og:url" content="${protocol}://${host}${originalUrl}" />
+                    <meta name="og:url" content="${protocol}://${host}${encodeURI(originalUrl)}" />
                     <meta name="twitter:card" content="summary" />
                     <meta name="twitter:creator" content="@roncli" />
                     ${IndexView.Common.favIcon()}