Note that the secret should also be percent-encoded.

git-svn-id: svn+ssh://svn.openpam.org/svn/openpam/trunk@887 185d5e19-27fe-0310-9dcf-9bff6b9f3609

lib/liboath/oath_key.c

@@ -70,7 +70,7 @@ oath_key_to_uri(const struct oath_key *key)
 		return (NULL);
 	}
 
-	/* XXX the label should be URI-encoded */
+	/* XXX the label and secret should be URI-encoded */
 	if (key->mode == om_hotp) {
 		urilen = asprintf(&uri, "otpauth://%s/%s?"
 		    "algorithm=%s&digits=%d&counter=%ju&secret=",