You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository was archived by the owner on Apr 12, 2024. It is now read-only.
Angular does not url-encode semicolon characters (whereas
encodeURIComponent(';')
does).As a result, if a user types a semicolon into a field which is included in a GET request resulting in a call like
$http.get('/', params: {per_page: 20, search: 'foo;bar'})
According to the relevant spec
A server using Rails will follow this spec and interpret the request as
{"per_page" =>"20", "search"=>"foo", "bar"=>nil}
Angular should escape GET params the same way as encodeURIComponent does.
The text was updated successfully, but these errors were encountered: