Remove characters should be %encoded from Slug

Author: Jeremy Hutchinson

Website/app_code/handlers/PostHandler.cs

@@ -1,6 +1,8 @@
 using System;
+using System.Collections.Generic;
 using System.Globalization;
 using System.Linq;
+using System.Security.Policy;
 using System.Text;
 using System.Text.RegularExpressions;
 using System.Web;
@@ -100,15 +102,28 @@ private byte[] ConvertToBytes(string base64)
 
     public static string CreateSlug(string title)
     {
-        title = title.ToLowerInvariant().Replace(" ", "-").Replace("#", "");
+        title = title.ToLowerInvariant().Replace(" ", "-");
         title = RemoveDiacritics(title);
+        title = RemoveReservedUrlCharacters(title);
 
         if (Storage.GetAllPosts().Any(p => string.Equals(p.Slug, title, StringComparison.OrdinalIgnoreCase)))
             throw new HttpException(409, "Already in use");
 
         return title.ToLowerInvariant();
     }
 
+    static string RemoveReservedUrlCharacters(string text)
+    {
+        var reservedCharacters = new List<string>() { "!", "#", "$", "&", "'", "(", ")", "*", ",", "/", ":", ";", "=", "?", "@", "[", "]", "\"", "%", ".", "<", ">", "\\", "^", "_", "'", "{", "}", "|", "~", "`", "+" };
+
+        foreach (var chr in reservedCharacters)
+        {
+            text = text.Replace(chr, "");
+        }
+
+        return text;
+    }
+
     static string RemoveDiacritics(string text)
     {
         var normalizedString = text.Normalize(NormalizationForm.FormD);