website icon indicating copy to clipboard operation
website copied to clipboard

Download links should escape plus sign

Open ibennetch opened this issue 1 year ago • 5 comments

When generating the links to download a snapshot, such as file phpMyAdmin-6.0+snapshot-all-languages.zip, the plus sign should technically be URL encoded to %2b.

This isn't usually a problem that I've seen, but there is something going on with our CDN that causes downloads to fail verification. Our CDN provider is looking at whether there is something they should do to fix it, but according to (my understanding of) the standards we should also encode the plus sign here.

ibennetch avatar Dec 19 '23 16:12 ibennetch

This is directly related to #164.

ibennetch avatar Dec 19 '23 16:12 ibennetch

I may be mistaken on this, according to https://stackoverflow.com/a/2678602/2385479 it appears to me the plus sign is literal in a URL except when part of a query string. So I think our code and URL is technically correct.

We are still discussing it with the CDN provider.

ibennetch avatar Dec 19 '23 16:12 ibennetch

According to RFC1738, plus sign is allowed in the URL - https://datatracker.ietf.org/doc/html/rfc1738#section-2.1. According to RFC1630, plus sign should be encoded if it's in the query string - https://datatracker.ietf.org/doc/html/rfc1630

So, clearly the issue is on their side.

liviuconcioiu avatar Dec 22 '23 08:12 liviuconcioiu

@ibennetch Could we encoded the URL to encode the plus sign to %2B as a temporary fix?

MauricioFauth avatar Jan 02 '24 01:01 MauricioFauth

So, clearly the issue is on their side.

Thank you for the RFC links.

I sent an email expressing our dissatisfaction about they reply.

williamdes avatar Apr 17 '24 17:04 williamdes

@ibennetch Could we encoded the URL to encode the plus sign to %2B as a temporary fix?

Done

williamdes avatar Oct 10 '24 11:10 williamdes