washeck/django-filebrowser-no-grappelli — pull request #1 by laat (2012-03-24 04:43:21+00:00)
Title: Urlquote

Xss was still possible:
`admin/filebrowser/browse/?"`

Some review of whether or not the quoted strings breaks functionality is needed.