diff options
| author | Unknwon <u@gogs.io> | 2015-08-29 12:08:37 +0800 |
|---|---|---|
| committer | Unknwon <u@gogs.io> | 2015-08-29 12:08:37 +0800 |
| commit | 63799b3c18b2511f51ccb1a985391ede641e8e93 (patch) | |
| tree | 37c256a3511c4a50b80013f19dbeb0b0529c4334 | |
| parent | 5ddcd8420b0631bd741b69cac02f9a4d4b6a3349 (diff) | |
| download | gitea-63799b3c18b2511f51ccb1a985391ede641e8e93.tar.gz gitea-63799b3c18b2511f51ccb1a985391ede641e8e93.zip | |
#1526 URL escape for username and password
| -rw-r--r-- | models/models.go | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/models/models.go b/models/models.go index 240c8ebca9..33db2ebac6 100644 --- a/models/models.go +++ b/models/models.go @@ -7,6 +7,7 @@ package models import ( "database/sql" "fmt" + "net/url" "os" "path" "strings" @@ -133,7 +134,7 @@ func getEngine() (*xorm.Engine, error) { port = fields[1] } cnnstr = fmt.Sprintf("postgres://%s:%s@%s:%s/%s?sslmode=%s", - DbCfg.User, DbCfg.Passwd, host, port, DbCfg.Name, DbCfg.SSLMode) + url.QueryEscape(DbCfg.User), url.QueryEscape(DbCfg.Passwd), host, port, DbCfg.Name, DbCfg.SSLMode) case "sqlite3": if !EnableSQLite3 { return nil, fmt.Errorf("Unknown database type: %s", DbCfg.Type) |