Index: lams_central/src/java/org/lamsfoundation/lams/web/LoginRequestLtiServlet.java
===================================================================
diff -u -rba30ff8870a09d3979846f37d807a65876717dfc -r74a43ab7df5020c4ac99a037e24b6c9bf3a735c3
--- lams_central/src/java/org/lamsfoundation/lams/web/LoginRequestLtiServlet.java	(.../LoginRequestLtiServlet.java)	(revision ba30ff8870a09d3979846f37d807a65876717dfc)
+++ lams_central/src/java/org/lamsfoundation/lams/web/LoginRequestLtiServlet.java	(.../LoginRequestLtiServlet.java)	(revision 74a43ab7df5020c4ac99a037e24b6c9bf3a735c3)
@@ -163,7 +163,8 @@
 	    //skip parameters starting with oath_
 	    if (LtiUtils.OAUTH_CONSUMER_KEY.equals(paramName)
 		    || !paramName.startsWith(BasicLTIConstants.OAUTH_PREFIX)) {
-		redirectUrl = WebUtil.appendParameterToURL(redirectUrl, paramName, request.getParameter(paramName));
+		String paramValue = request.getParameter(paramName);
+		redirectUrl = WebUtil.appendParameterToURL(redirectUrl, paramName, URLEncoder.encode(paramValue, "UTF-8"));
 	    }
 	}