X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~yarrgweb/git?a=blobdiff_plain;f=yarrg%2Fweb%2Froutetrade;h=f339caaab029d1282dcbc0488f97ef521218f8e4;hb=46a78df16b626c7455d6f1879415b0fa2da76744;hp=b51a3a06eb4810c7dc920a69a072dbc6d84352b1;hpb=ca4f2a1a8f85d4dbd1c85250f95c6980d6bf9f3a;p=ypp-sc-tools.db-live.git

diff --git a/yarrg/web/routetrade b/yarrg/web/routetrade
index b51a3a0..f339caa 100644
--- a/yarrg/web/routetrade
+++ b/yarrg/web/routetrade
@@ -896,7 +896,7 @@ END
 		$linkqf{'query'}= 'commod';
 		$linkqf{'commodstring'}= $t->{'commodname'};
 		$linkqf{'commodid'}= $t->{'commodid'};
-		my $linkqfpr= $quri->(%linkqf);
+		my $linkqfpr= encode_entities( $quri->(%linkqf) );
 		my $commodnamepr= encode_entities($t->{'commodname'});
 		$plan_html .= tr_datarow_s($m,$dline) . <<END;
 <$td>$collectdeliver