mode/bookmarklets: Check if javascript: url is percent-encoded.

atlas-engineer · Aug 24, 2023 · 729b44c · 729b44c
1 parent b9e85ad
commit 729b44c
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/source/mode/bookmarklets.lisp b/source/mode/bookmarklets.lisp
@@ -28,7 +28,12 @@ By default, this mode does nothing but expose the default bookmarklet commands."
                              (pathname (files:content (make-instance 'files:file :base-path source)))
                              (string source)))
                    (source (if (str:starts-with-p "javascript:" source)
-                               (quri:url-decode (subseq source 11))
+                               (let ((source-original (subseq source 11)))
+                                 (if (string= source-original (quri:url-decode source-original :lenient t))
+                                     (progn
+                                       (echo-warning "Bookmarklet is not properly percent-encoded.")
+                                       "")
+                                     source-original))
                                source)))
               (ffi-buffer-evaluate-javascript-async buffer source))))
     (export 'define-bookmarklet-command)