Encode values

[CodesInChaos]

This doesn't handle values containing special characters correctly, because it doesn't escape them. This is particularly problematic for & and =, since these will now be interpreted as separate parameters. This could lead to security vulnerabilities, similar to SQL-Injection or XSS.

[NotBad4U]

Hi, srry for the delay I was quite busy this weeks.
So yeah that can become a serious problem to not escape them.
I see 2 options:

• Parse the ident and remove all the = and & symbols on to_query_params call.
• Parse and panic! if we encounter this symbols. IMO I don't like when a lib panic.

[CodesInChaos]

Too lazy to dig through the spec right now, but I would expect percent encoding special characters to be the proper approach.

[NotBad4U]

I'll try to found some time to look at the spec.