allow %

diff --git a/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php b/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php
index a378820a5c1b0522931264891f76696621085c72..8bbca9512b2fc689df2a81c0057bab6fa76ec8dc 100644 (file)
--- a/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php
+++ b/plugins/serendipity_event_bbcode/serendipity_event_bbcode.php
@@ -149,7 +149,7 @@ class serendipity_event_bbcode extends serendipity_event
         static $pattern_mail  = '([\.\-\+~@_0-9a-z]+?)';
 
         // Only allow strings occuring in URLs: &;?:.-_@/, 0-9, a-z
-        static $pattern_url   = '([@!=~\?:&;0-9a-z#\.\-_\/,]+?)';
+        static $pattern_url   = '([@!=~\?:&;0-9a-z#\.\-_\/,%]+?)';
 
         // Disallow possibly evil HTML characters which may lead to Javascript XSS: '"();
         static $pattern_query = '([^"\'\(\);]+?)';