Bug: TWiki::handleUrlEncode does not protect all reserved and unsafe characters

At several places (e.g., parameters to oops) text may be passed to the URL which contains either reserved or unsafe characters. handleUrlEncode is supposed to protect those by encoding them, but not all problematic characters are handled. I ran into this when text I passed contained a hash character.

I have attached a patch which covers all the problematic characters. There is one thing I am not sure about which is the percent sign, that should be encoded as \%25. However, if the string passed already contains an encoded character, this would mess it up. I am not sure whether there are any rules that would allow me to recognize that an encoded character was in the string, rather than just a percent sign followed by two hex digits.

Test case

Paste the text contained in this file into the browser address, taking care to change the URL to refer to your own TWiki installation.

Environment

-- ThomasWeigert - 12 Apr 2003

Follow up

There is another patch needed to fix <br /> encoding, noted on MinorXHTMLNonComplianceInTemplates.

Fix record