OF-2627: URL-encode username on Admin Console URL.

igniterealtime · Jul 17, 2023 · ce65e27 · ce65e27
1 parent 53adb8a
commit ce65e27
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/xmppserver/src/main/webapp/group-edit.jsp b/xmppserver/src/main/webapp/group-edit.jsp
@@ -690,7 +690,7 @@
                     <td>
                         <c:choose>
                             <c:when test="${webManager.userManager.isRegisteredUser(member, false)}">
-                                <a href="user-properties.jsp?username=${fn:escapeXml(webManager.userManager.getUser(member).username)}">
+                                <a href="user-properties.jsp?username=${admin:urlEncode(webManager.userManager.getUser(member).username)}">
                                     <c:out value="${webManager.userManager.getUser(member).username}"/>
                                 </a>
                             </c:when>