Default mode URL should be escaped before using it
[claws.git] / src / plugins / libravatar / libravatar.c
index de5100aa7b0d6905c9b71c7ddea4e4b213299c7d..41290aa1b7f8d4e1f5d1be9c379cad2f9d5b9413 100644 (file)
@@ -210,9 +210,11 @@ static gchar *libravatar_url_for_md5(const gchar *base, const gchar *md5)
                                base, md5, AVATAR_SIZE,
                                def_mode[libravatarprefs.default_mode - 10]);
        } else if (libravatarprefs.default_mode == DEF_MODE_URL) {
-               return g_strdup_printf("%s/%s?s=%u&d=%s",
-                               base, md5, AVATAR_SIZE,
-                               libravatarprefs.default_mode_url);
+               gchar *escaped = g_uri_escape_string(libravatarprefs.default_mode_url, "/", TRUE);
+               gchar *url = g_strdup_printf("%s/%s?s=%u&d=%s",
+                               base, md5, AVATAR_SIZE, escaped);
+               g_free(escaped);
+               return url;
        } else if (libravatarprefs.default_mode == DEF_MODE_NONE) {
                return g_strdup_printf("%s/%s?s=%u",
                                base, md5, AVATAR_SIZE);