Just sharing a strange behavior that I came across in Lucee 5.3.6.61 on Java 8. It seems that the CFLocation
tag double-encodes some values in a query-string parameter if the same parameter also contains an unecoded plus:
Example, if I pass-through a parameter:
CraftManager%2F1.0.97+196
… with encoded forward-slash and unencoded plus, it arrives at the next page as:
CraftManager%2F1.0.97+196
… notice that the %2F
was not decoded into /
, but rather double-encoded.