Add escaping for bad platform string.

From GitbookIO#138

Author: rastiqdev

lib/nuts.js

@@ -257,7 +257,9 @@ Nuts.prototype.onUpdateRedirect = function (req, res, next) {
       if (!req.query.platform) throw new Error('Requires "platform" parameter');
 
       return res.redirect(
-        `${that.opts.routePrefix}update/${req.query.platform}/${req.query.version}`
+        `${that.opts.routePrefix}update/${_.escape(req.query.platform)}/${
+          req.query.version
+        }`
       );
     })
     .fail(next);