diff --git a/lib/fog/aws/requests/storage/delete_multiple_objects.rb b/lib/fog/aws/requests/storage/delete_multiple_objects.rb index 363c03267..d77af0ab2 100644 --- a/lib/fog/aws/requests/storage/delete_multiple_objects.rb +++ b/lib/fog/aws/requests/storage/delete_multiple_objects.rb @@ -42,10 +42,10 @@ module Fog version_ids = options.delete('versionId') object_names.each do |object_name| data << "" - data << "#{CGI.escape(object_name)}" + data << "#{CGI.escapeHTML(object_name)}" object_version = version_ids.nil? ? nil : version_ids[object_name] if object_version - data << "#{CGI.escape(object_version)}" + data << "#{CGI.escapeHTML(object_version)}" end data << "" end