# HG changeset patch # User Seve Ferrer # Date 1632410015 -7200 # Node ID 15c335dc196e0dc0b92aa154b74477ce8278b1a6 # Parent 6a05c9eb964e894ca85d1bd5a739f83dfc139fa4 mod_muc_http_auth: Make sure query parameters are URL encoded diff -r 6a05c9eb964e -r 15c335dc196e mod_muc_http_auth/mod_muc_http_auth.lua --- a/mod_muc_http_auth/mod_muc_http_auth.lua Thu Sep 23 16:41:42 2021 +0200 +++ b/mod_muc_http_auth/mod_muc_http_auth.lua Thu Sep 23 17:13:35 2021 +0200 @@ -58,7 +58,7 @@ -- Nickname is mandatory to enter a MUC if not user_nickname then return; end - local url = authorization_url .. "?userJID=" .. user_bare_jid .."&mucJID=" .. room.jid .. "&nickname=" .. user_nickname; + local url = authorization_url .. "?userJID=" .. urlencode(user_bare_jid) .."&mucJID=" .. urlencode(room.jid) .. "&nickname=" .. urlencode(user_nickname); local result = wait_for(http.request(url, options):next(handle_success, handle_error)); local response, err = result.response, result.err;