Escape 'select' values in REST actions (#21)

esphome · Oct 29, 2022 · afad4eb · afad4eb
1 parent 2abf744
commit afad4eb
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/v2/esp-entity-table.ts b/v2/esp-entity-table.ts
@@ -76,7 +76,7 @@ export class EntityTable extends LitElement {
     return html`<select
       @change="${(e: Event) => {
         let val = e.target?.value;
-        this.restAction(entity, `${action}?${opt}=${val}`);
+        this.restAction(entity, `${action}?${opt}=${encodeURIComponent(val)}`);
       }}"
     >
       ${options.map(