Merge pull request #773 from Martii/adminUTFIssues

Fix flagging and AuthAs

Auto-merge

Author: Martii

controllers/admin.js

@@ -474,6 +474,6 @@ exports.authAsUser = function (aReq, aRes, aNext) {
 
     aReq.session.user = user;
 
-    aRes.redirect(user.userPageUrl);
+    aRes.redirect(encodeURI(user.userPageUrl));
   });
 };

controllers/user.js

@@ -1481,7 +1481,7 @@ exports.flag = function (aReq, aRes, aNext) {
     if (aErr || !aUser) { return aNext(); }
 
     fn(User, aUser, aReq.session.user, function (aFlagged) { // NOTE: Inline function here
-      aRes.redirect('/users/' + username);
+      aRes.redirect('/users/' + encodeURI(username));
     });
   });
 };