ended3월 25일· 1 sources

URL Encoding Is Not Optional (And Getting It Wrong Breaks Everything)

URL 인코딩은 선택이 아니다 (잘못하면 모든 것이 망가진다)

Why it matters

URLs can only contain specific unreserved characters; everything else must be percent-encoded per RFC 3986. JavaScript's encodeURIComponent and encodeURI serve different purposes—misusing encodeURI on parameter values creates security vulnerabilities. Double encoding is the most common bug, where already-encoded strings get encoded again, breaking URLs in redirect chains.

1
Sources
+0
24h
Growth
170d
Active
URL encodingpercent-encodingRFC 3986encodeURIComponentdouble encoding

Sources

Related Issues