Details
Description
The Facebook Like button is populated by an iframe, and the URL of the contribution page (or whatever else) the social network box is input directly into the href of the iframe. This means that anything after an ampersand gets cut off of the URL, and Facebook users end up liking a page like
http://sandbox.drupal.civicrm.org/civicrm/contribute/transact?reset=1
I've edited the template CRM/common/SocialNetwork.tpl to escape the page URL so it's all sent through to Facebook. A patch is attached.