index.php

@@ -83,11 +83,11 @@ $requestName2 = isset($_GET['requestName2'])?$_GET['requestName2']:'';
     <h2 class="subtitle">Requête</h2>
     <form action="" method="GET">
         <label class="label" for="request1">Requête 1</label>
-        <input class="input" id="request1" name="request1" type="text" style="width: 100%;" value="<?= $request1 ?>"><br />
+        <input class="input" id="request1" name="request1" type="text" style="width: 100%;" value="<?= htmlspecialchars($request1) ?>"><br />
         <label class="label" for="requestName1">Nom requête 1 : </label>
         <input class="input" id="requestName1" name="requestName1" type="text" style="width: 100%;" value="<?= $requestName1 ?>"><br />
         <label class="label" for="request2">Requête 2 : </label>
-        <input class="input" id="request2" name="request2" type="text" style="width: 100%;" value="<?= $request2 ?>"><br />
+        <input class="input" id="request2" name="request2" type="text" style="width: 100%;" value="<?= htmlspecialchars($request2) ?>"><br />
         <label class="label" for="requestName2">Nom requête 2 : </label>
         <input class="input" id="requestName2" name="requestName2" type="text" style="width: 100%;" value="<?= $requestName2 ?>"><br />
         <label class="label" for="fields">Champs à afficher (séparés par une virgule) : </label>
@@ -178,6 +178,8 @@ function paralelle(HalRequestIterator $a, HalRequestIterator $b, array $fields,
  */
 if(isset($_GET['request1'])&&isset($_GET['request2'])&&isset($_GET['fields'])&&isset($_GET['requestName1'])&&isset($_GET['requestName2'])) {
     if(strpos($fields, 'docid')===false) $fields = 'docid,'.$fields;
+    $request1 = str_replace(' ', '%20', $request1);
+    $request2 = str_replace(' ', '%20', $request2);
     $full_request1 = $request1.'&fl='.$fields;
     $request1 = new HalRequestIterator($full_request1, $requestName1);
     $full_request2 = $request2.'&fl='.$fields;