encodeForURL doesn't URL encode certain special characters

[GoogleCodeExporter]

What steps will reproduce the problem?
1.  encodeForURL doesn't URL encode certain special characters such as * @ - _ 
+ . /

What is the expected output? What do you see instead?
The above characters should be URL encoded.


What version of the product are you using? On what operating system?
Latest version on Linux.

Please provide any additional information below.

Looks like in DefaultEncoder.js, the encodeForURL/decodeForURL it is calling 
escape()/unescape().  It should probably call 
encodeURIComponent()/decodeURIComponent() instead.

Original issue reported on code.google.com by wvinc...@gmail.com on 7 Sep 2012 at 5:27

[sarahmonks]

I had this problem too. so I changed the code in esapi.js to encodeURI and decodeURI as follows:
encodeForURL: function(sInput) {
return !sInput ? null : encodeURI(sInput);
},

    decodeFromURL: function(sInput) {
        return !sInput ? null : decodeURI(sInput);
    },