allow %

diff --git a/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php b/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php
index 171679967c6207f5f0c81338738d0fff99ed332d..ded4d9f3c3b4475aa4ef8eae87996620ce29f0a0 100644 (file)
--- a/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php
+++ b/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php
@@ -149,7 +149,7 @@ class serendipity_event_bbcode extends serendipity_event
         static $pattern_mail  = '([\.\-\+~@_0-9a-z]+?)';
 
         // Only allow strings occuring in URLs: &;?:.-_@/, 0-9, a-z
-        static $pattern_url   = '([@!=~\?:&;0-9a-z#\.\-_\/,]+?)';
+        static $pattern_url   = '([@!=~\?:&;0-9a-z#\.\-_\/,%]+?)';
 
         // Disallow possibly evil HTML characters which may lead to Javascript XSS: '"();
         static $pattern_query = '([^"\'\(\);]+?)';