From ad2b169b0b40aa53bfacb8a7cfb89631134a865d Mon Sep 17 00:00:00 2001
From: David Lawrence <dkl@mozilla.com>
Date: Thu, 10 Mar 2016 03:11:41 +0000
Subject: Bug 1254675 - bug_modal template fails to escape format parameter

---
 extensions/BugModal/template/en/default/bug_modal/edit.html.tmpl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'extensions/BugModal/template')

diff --git a/extensions/BugModal/template/en/default/bug_modal/edit.html.tmpl b/extensions/BugModal/template/en/default/bug_modal/edit.html.tmpl
index 9b6e0ebd4..25f785a9d 100644
--- a/extensions/BugModal/template/en/default/bug_modal/edit.html.tmpl
+++ b/extensions/BugModal/template/en/default/bug_modal/edit.html.tmpl
@@ -167,7 +167,7 @@
     %]
       <div id="field-value-bug_id">
         <a id="this-bug" href="show_bug.cgi?id=[% bug.id FILTER none %]
-                [%~ '&amp;format=' _ cgi.param("format") IF cgi.param("format") %]"
+                [%~ '&amp;format=' _ cgi.param("format") FILTER uri IF cgi.param("format") %]"
         >
           [%~ terms.Bug _ " " _ bug.id FILTER none ~%]
         </a>
-- 
cgit v1.2.3-24-g4f1b