Item14377: Entity encode the topic name.

foswiki · May 5, 2017 · 7a62049 · 7a62049
1 parent dc8f3ac
commit 7a62049
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/core/lib/Foswiki/UI/Rest.pm b/core/lib/Foswiki/UI/Rest.pm
@@ -101,8 +101,10 @@ sub rest {
     if ($topic) {
         unless ( $topic =~ m/\.|\// ) {
             $res->header( -type => 'text/html', -status => '400' );
-            $err = 'ERROR: (400) Invalid REST invocation'
-              . " - Invalid topic parameter $topic\n";
+            $err =
+                'ERROR: (400) Invalid REST invocation'
+              . " - Invalid topic parameter: "
+              . Foswiki::entityEncode($topic) . "\n";
             $res->print($err);
             $session->logger->log( 'warning', "REST rejected: " . $err,
                 " - $referer", );