init.php: urldecode() QUERY_STRING and REQUEST_URI before cleaning

1 files changed, 2 insertions, 2 deletions

diff --git a/init.php b/init.php
index 3ea1c4d..ee01831 100644
--- a/init.php
+++ b/init.php
@@ -6,7 +6,7 @@ $_SERVER['QUERY_STRING'] =
     htmlspecialchars(
       preg_replace(
         '/%.?.?/', '',
-        $_SERVER['QUERY_STRING']
+        urldecode($_SERVER['QUERY_STRING'])
       )
     )
   );
@@ -16,7 +16,7 @@ $_SERVER['REQUEST_URI'] =
     htmlspecialchars(
       preg_replace(
         '/%.?.?/', '',
-        $_SERVER['REQUEST_URI']
+        urldecode($_SERVER['REQUEST_URI'])
       )
     )
   );