diff --git a/typo3/sysext/backend/Resources/Public/JavaScript/jsfunc.inline.js b/typo3/sysext/backend/Resources/Public/JavaScript/jsfunc.inline.js index 37fe19b52786e6704bfd199bf8da24e068569983..9296116ce0942073f32045f442db4804d5e5de1d 100644 --- a/typo3/sysext/backend/Resources/Public/JavaScript/jsfunc.inline.js +++ b/typo3/sysext/backend/Resources/Public/JavaScript/jsfunc.inline.js @@ -192,12 +192,12 @@ var inline = { var max, url='', urlParams='', options={}; if (method && params && params.length && this.lockAjaxMethod(method, lock)) { url = TBE_EDITOR.getBackendPath() + 'ajax.php'; - urlParams = '&ajaxID=t3lib_TCEforms_inline::'+method; + urlParams = '&ajaxID=' + encodeURIComponent('t3lib_TCEforms_inline::' + method); for (var i=0, max=params.length; i<max; i++) { - urlParams += '&ajax['+i+']='+params[i]; + urlParams += '&ajax[' + i + ']=' + encodeURIComponent(params[i]); } if (context) { - urlParams += '&ajax[context]=' + Object.toJSON(context); + urlParams += '&ajax[context]=' + encodeURIComponent(Object.toJSON(context)); } options = { method: 'post', @@ -1261,4 +1261,4 @@ Object.extend(Array.prototype, { $(function() { $(document).delegate('div.t3-form-field-header-inline', 'click', inline.toggleEvent); }); -})(TYPO3.jQuery); \ No newline at end of file +})(TYPO3.jQuery);