From f5596ea121fa908e7d2f660ee9a25152adfd5589 Mon Sep 17 00:00:00 2001
From: Mattias Erming <mattias@mattiaserming.com>
Date: Thu, 19 Jun 2014 12:58:25 +0200
Subject: [PATCH] Escape URIs replaced in messages

---
 client/js/chat.js | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/client/js/chat.js b/client/js/chat.js
index 228771f3..bf7ef4af 100644
--- a/client/js/chat.js
+++ b/client/js/chat.js
@@ -410,9 +410,10 @@ $(function() {
 			});
 			text = escape(text);
 			for (var i in urls) {
+				var url = escape(urls[i]);
 				text = text.replace(
 					"{" + i + "}",
-					"<a href='" + urls[i].replace(/^www/, "//www") + "' target='_blank'>" + urls[i] + "</a>"
+					"<a href='" + url.replace(/^www/, "//www") + "' target='_blank'>" + url + "</a>"
 				);
 			}
 			return text;