Bug 230628

Summary: WTF::removeQueryParameters() decodes URL-encoded characters in remaining parameters
Product: WebKit Reporter: John Wilander <wilander>
Component: Web Template FrameworkAssignee: Nobody <webkit-unassigned>
Status: NEW ---    
Severity: Normal CC: achristensen, ahmad.saleem792, annevk, bfulgham, katherine_cheney, webkit-bug-importer
Priority: P2 Keywords: InRadar
Version: WebKit Nightly Build   
Hardware: Unspecified   
OS: Unspecified   
See Also: https://bugs.webkit.org/show_bug.cgi?id=228122
Bug Depends on:    
Bug Blocks: 128023    

Description John Wilander 2021-09-22 08:15:56 PDT
Reported by Anne van Kesteren in https://bugs.webkit.org/show_bug.cgi?id=228122#c42:
> removeQueryParameters looks buggy as instead of using a serializer for
> the resulting query you append the raw keys and values to a string. Meaning
> that %3D would become = and %26 becomes &, etc. unless I'm missing
> something. You probably want to use the internal equivalent of
> URLSearchParams instead.
Comment 1 Radar WebKit Bug Importer 2021-09-29 08:16:16 PDT
<rdar://problem/83671508>