Fix querystring cross site nastiness
Merge pull request #1055 from fhossain/querystring_escaping

Fix querystring cross site nastiness