From 833de1a1af2ef9efce23741f995043bf651d6a1e Mon Sep 17 00:00:00 2001 From: Mike Cao Date: Fri, 7 Mar 2025 18:42:15 -0800 Subject: [PATCH] Added decoding to URL elements. --- src/app/api/send/route.ts | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/src/app/api/send/route.ts b/src/app/api/send/route.ts index 8519a73e..bd255eaf 100644 --- a/src/app/api/send/route.ts +++ b/src/app/api/send/route.ts @@ -10,6 +10,7 @@ import { createToken, parseToken } from '@/lib/jwt'; import { secret, uuid, hash } from '@/lib/crypto'; import { COLLECTION_TYPE } from '@/lib/constants'; import { anyObjectParam, urlOrPathParam } from '@/lib/schema'; +import { safeDecodeURI, safeDecodeURIComponent } from '@/lib/url'; import { createSession, saveEvent, saveSessionData } from '@/queries'; const schema = z.object({ @@ -168,12 +169,12 @@ export async function POST(request: Request) { websiteId, sessionId, visitId, - urlPath, + urlPath: safeDecodeURI(urlPath), urlQuery, - referrerPath, + referrerPath: safeDecodeURI(referrerPath), referrerQuery, referrerDomain, - pageTitle: title, + pageTitle: safeDecodeURIComponent(title), eventName: name, eventData: data, hostname: hostname || urlDomain,