[Pidgin] #3446: '|' character in a URL "splits" the URL when passed to FireFox

[Pidgin]

#3446: '|' character in a URL "splits" the URL when passed to FireFox
----------------------+-----------------------------------------------------
Reporter:  philmills  |       Owner:  lschiere    
    Type:  defect     |      Status:  new         
Priority:  minor      |   Component:  unclassified
 Version:  2.2.1      |    Keywords:              
 Pending:  0          |  
----------------------+-----------------------------------------------------
 When a URL received in an IM session contains pipe characters ('|'),
 Pidgin splits the URL at that spot and passes it on to Firefox (default
 browser) as two (or more) separate URLs.

 This is a potential security hole.

 The following link to a listing on cars.com ends up spawning 9 tabs in
 Firefox:
 http://www.cars.com/go/search/detail.jsp?paId=134436535&recnum=1&leadExists=true&numResultsPerPage=50&pageNumber=0&certifiedOnly=false&recNumber=&sortorder=descending&searchType=21&rowCount=&criteria=K-|E-|M-_29_|B-30000|D-_271_|N-N|R-10000|I-1|P-PRICE%2
 Note that there are 8 instances of the '|' character.  Each FF tab gets
 one of the 9 substrings that you get splitting at the pipes (and then
 tries to open that substring as a real website).

 This seems to be a Pidgin-specific behavior.  The same link when opened
 via an IM session in Trillian creates only one window/tab in Firefox with
 all '|' characters still present in the link.

 Tested on WinXP SP2 using Pidgin 2.1.1 (via Portable Apps), Firefox
 2.0.0.7 and Trillian 3.1 Basic.

-- 
Ticket URL: <http://developer.pidgin.im/ticket/3446>
Pidgin <http://pidgin.im>
Pidgin