ara
ara copied to clipboard
Unescaped label values in URL
What is the issue ?
The default subset
label created when a play is limited via --limit
can contain ampersands, which means, when clicking on the label, we always get an empty result due to part of the label value being interpreted as another parameter.
Example: ?label=subset:vault,&staging
What should be happening ?
&
should be escaped to ?label=subset:vault,%26staging
(the decoding works fine, if I fix the URL manually, I get the expected result).