urlencode params in ajax call

public_html/deployment/pages/act_build.php

@@ -7,9 +7,12 @@
   webgui - build a package
 
   ---------------------------------------------------------------------
-  2014-11-14  Axel <axel.hahn@iml.unibe.ch>  selector for branches
-  2014-02-14  Axel <axel.hahn@iml.unibe.ch>  build was "ajaxified"
   2013-11-08  Axel <axel.hahn@iml.unibe.ch>
+  2014-02-14  Axel   build was "ajaxified"
+  2014-11-14  Axel   selector for branches
+  (...)
+  2024-09-20  Axel   urlencode params in ajax call
+
   ###################################################################### */
 
 require_once("./classes/project_gui.class.php");
@@ -187,10 +190,10 @@ if (!array_key_exists("confirm", $aParams)) {
     $sAjaxFile = $aParams["prj"] . "_" . $aParams["action"];
     $sDivname = "outAjax";
     $sUrlStartAction = "/deployment/?"
-        . "&prj=" . $aParams["prj"]
+        . "&prj=" . urlencode($aParams["prj"])
         . "&action=" . $aParams["action"]
         . "&confirm=" . $aParams["confirm"]
-        . "&branchname=" . $aParams["branchname"]
+        . "&branchname=" . urlencode($aParams["branchname"])
         . "&ajax=" . $sAjaxFile
         . "&run=1"
     ;