Commits

Brodie Rao  committed 80019da

Make sure query strings in playlists are XML-escaped

  • Participants
  • Parent commits f619704

Comments (0)

Files changed (1)

File streamtar/playlist.py

         selection = args.pop('tracks', [''])[0]
         args.pop('playlist', None)
         if args:
-            argstr = '?' + urlencode(args, True)
+            argstr = '?' + escape(urlencode(args, True))
         else:
             argstr = ''