Encode entities in linkqf from routetrade

diff --git a/yarrg/web/routetrade b/yarrg/web/routetrade
index b51a3a06eb4810c7dc920a69a072dbc6d84352b1..f339caaab029d1282dcbc0488f97ef521218f8e4 100644 (file)
--- a/yarrg/web/routetrade
+++ b/yarrg/web/routetrade
@@ -896,7 +896,7 @@ END
                $linkqf{'query'}= 'commod';
                $linkqf{'commodstring'}= $t->{'commodname'};
                $linkqf{'commodid'}= $t->{'commodid'};
-               my $linkqfpr= $quri->(%linkqf);
+               my $linkqfpr= encode_entities( $quri->(%linkqf) );
                my $commodnamepr= encode_entities($t->{'commodname'});
                $plan_html .= tr_datarow_s($m,$dline) . <<END;
 <$td>$collectdeliver