FIX: HTTP query validation fixed

related to: Oldes/Rebol-issues#2606

Author: Oldes

src/mezz/prot-http.reb

@@ -260,14 +260,14 @@ escape-query: function/with [
 ][
 	parse query [some [
 		some allowed
-		| #"%" 2 numeric ;; already escaped
+		| #"%" 2 hex ;; already escaped
 		| change #" " #"+" 
 		| change set c: skip (ajoin [#"%" enbase to binary! c 16])
 	]]
 	query
 ][
-	numeric: system/catalog/bitsets/numeric
-	allowed: charset [#"a"-#"z" #"A"-#"Z" #"0"-#"9" "-~!@*/|\;,._()[]{}+=?~"]
+	hex: system/catalog/bitsets/hex-digits
+	allowed: charset [#"a"-#"z" #"A"-#"Z" #"0"-#"9" "-~!@*/|\;,._()[]{}+=?~&"]
 ]
 
 make-http-request: func [

src/tests/units/port-http-test.r3

@@ -130,10 +130,11 @@ system/schemes/http/spec/timeout: 30
 	--test-- "query with a space"
 		;@@ https://github.com/Oldes/Rebol-issues/issues/2606
 		--assert all [ ;= OK
-			block? res: try [read/all append http://httpbin.org/get?q= "Some query"]
+			block? res: try [read/all append http://httpbin.org/get? "q=Some query&v=[]"]
 			res/1 = 200
 			map? try [data: decode 'json res/3]
 			data/args/q == "Some query"
+			data/args/v == "[]"
 		]
 ===end-group===