--- loncom/interface/lonsource.pm	2015/05/25 15:36:11	1.35
+++ loncom/interface/lonsource.pm	2017/09/18 16:58:08	1.36
@@ -1,7 +1,7 @@
 # The LearningOnline Network with CAPA
 # Source Code handler
 #
-# $Id: lonsource.pm,v 1.35 2015/05/25 15:36:11 raeburn Exp $
+# $Id: lonsource.pm,v 1.36 2017/09/18 16:58:08 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -44,8 +44,9 @@ use LONCAPA qw(:DEFAULT :match);
 
 sub make_link {
     my ($filename, $listname) = @_;
-    my $sourcelink = "/adm/source?inhibitmenu=yes&filename=".$filename."&listname=".$listname;
-
+    my $sourcelink = '/adm/source?inhibitmenu=yes&filename='.
+                     &escape(&escape($filename)).'&listname='.
+                     &escape(&escape($listname));
     return $sourcelink;
 }