[LON-CAPA-cvs] cvs: loncom /interface lonwhatsnew.pm

[raeburn]

raeburn		Wed Sep 13 22:30:21 2017 EDT

  Modified files:              
    /loncom/interface	lonwhatsnew.pm 
  Log:
  - Bug 6860.
    - Escape $msgid used in query string in link to a new course message.
  
  
Index: loncom/interface/lonwhatsnew.pm
diff -u loncom/interface/lonwhatsnew.pm:1.123 loncom/interface/lonwhatsnew.pm:1.124
--- loncom/interface/lonwhatsnew.pm:1.123	Fri May 19 18:23:19 2017
+++ loncom/interface/lonwhatsnew.pm	Wed Sep 13 22:30:20 2017
@@ -1,5 +1,5 @@
 #
-# $Id: lonwhatsnew.pm,v 1.123 2017/05/19 18:23:19 raeburn Exp $
+# $Id: lonwhatsnew.pm,v 1.124 2017/09/13 22:30:20 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -1325,6 +1325,7 @@
             if ($emailstatus{$msgid} eq 'new') {
                 $skipstatus = 1;
             }
+            my $esc_msgid = &escape($msgid);
             my ($sendtime,$shortsubj,$fromname,$fromdom,$status,$fromcid)=
                 &Apache::lonmsg::unpackmsgid($msgid,undef,$skipstatus,undef,
                                              $env{'request.course.id'});
@@ -1337,7 +1338,7 @@
                             $shortsubj = &mt('No subject');
                         }
                         push(@{$newmsgs}, {
-                            msgid    => $msgid,
+                            msgid    => $esc_msgid,
                             sendtime => $sendtime,
                             shortsub => $shortsubj,
                             from     => $fromname,