• Stan Hu's avatar
    Escape username and password in UrlSanitizer#full_url · 50ff3626
    Stan Hu authored
    If a user uses a password with certain characters (e.g. /, #, +, etc.)
    UrlSanitizer#full_url will generate an invalid URL that cannot be
    parsed properly by Addressable::URI. If used with UrlBlocker, this
    will be flagged as an invalid URI.
    50ff3626
url_sanitizer_spec.rb 6 KB