Escape characters being transmitted by the instant messenger in webcit

diff --git a/webcit/static/instant_messenger.html b/webcit/static/instant_messenger.html
index 8b7277f942fe4ce61fceef76962a321ccf490e3b..eea8c586833e53730b76072a5279a0dab3bd7a54 100644 (file)
--- a/webcit/static/instant_messenger.html
+++ b/webcit/static/instant_messenger.html
@@ -47,7 +47,7 @@ function SendSomething(which_div, sendform, recipient) {
 
        // Send the text to the server
        parms = 'r=' + Math.random()
-               + '&g_cmd=SEXP ' + recipient + '|' + thetext;
+               + '&g_cmd=SEXP ' + recipient + '|' + escape(thetext);
        new Ajax.Request('../ajax_servcmd',
                {
                        method: 'get',