ara icon indicating copy to clipboard operation
ara copied to clipboard

Unescaped label values in URL

Open bendem opened this issue 1 year ago • 1 comments

What is the issue ?

The default subset label created when a play is limited via --limit can contain ampersands, which means, when clicking on the label, we always get an empty result due to part of the label value being interpreted as another parameter.

Example: ?label=subset:vault,&staging

What should be happening ?

& should be escaped to ?label=subset:vault,%26staging (the decoding works fine, if I fix the URL manually, I get the expected result).

bendem avatar Jan 31 '23 11:01 bendem