http://bugs.winehq.org/show_bug.cgi?id=22454
--- Comment #2 from Alex Balut alexandru.balut@gmail.com 2010-06-14 17:34:57 --- The editAppFamily.php, and editAppVersion.php files use the html_back_link() function to create links, and they pass the URL created by $oApp/$oVersion->objectMakeUrl().
html_back_link() correctly (IMO) escapes the passed $url, but the objectMakeUrl() functions already create escaped URLs. A bit messy.
I'll change the objectMakeUrl() functions to create raw URLs, and I'll make sure they are properly escaped when the function is used.