escape all url entities

8 months ago · f12ff02616
1 changed files with 6 additions and 2 deletions
--- a/src/Pango.php
+++ b/src/Pango.php
@ -166,7 +166,9 @@ class Pango
				@@ -166,7 +166,9 @@ class Pango
                {
                    $lines[$index] = sprintf(
                        '<a href="%s">%s</a>',
-                        $address,
+                        self::escape(
+                            $address
+                        ),
                        self::escape(
                            $alt
                        )
@ -177,7 +179,9 @@ class Pango
				@@ -177,7 +179,9 @@ class Pango
                {
                    $lines[$index] = sprintf(
                        '<a href="%s" title="%s">%s</a>',
-                        $address,
+                        self::escape(
+                            $address
+                        ),
                        self::escape(
                            urldecode(
                                $address