Encode username component in login_as link

Resolves #299
ncbo · Mar 9, 2024 · 364a484 · 364a484
1 parent 1d54018
commit 364a484
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/app/assets/javascripts/bp_admin.js b/app/assets/javascripts/bp_admin.js
@@ -892,7 +892,7 @@ function populateUserRows(data) {
         let actions = [
             '<a href="/accounts/'+ user['username'] +'"  class="mx-1">Detail</a>' ,
             '<a href="javascript:;" class="delete-user mx-1" data-account-name="' + username + '">Delete</a>',
-            '<a href="/login_as/'+ username +'" class="mx-1">Login as</a>',
+            '<a href="/login_as/'+ encodeURIComponent(username) +'" class="mx-1">Login as</a>',
 
         ]
         let row = [firstname, lastname, username, email , roles , id , created , actions.join('|')];