[SUGESTION] Plus Sign on URLs

[Pedro_SEC_R]

Hello there,
Recently I had a company reached out to me because it couldn't reproduce the vulnerability correctly. I later found out that the URL encoded '%2B' was decoded to '+' an then it wouldn't work since the application translates the '+' as space. Perhaps we could have an option to not decode URL encoded characters.
I don't know if I let myself clear but since the company hasn't patch the vuln yet I can't post the payload here.

Thanks

[x1admin]

Hello there,
Recently I had a company reached out to me because it couldn't reproduce the vulnerability correctly. I later found out that the URL encoded '%2B' was decoded to '+' an then it wouldn't work since the application translates the '+' as space. Perhaps we could have an option to not decode URL encoded characters.
I don't know if I let myself clear but since the company hasn't patch the vuln yet I can't post the payload here.

Thanks

provide report id

[Pedro_SEC_R]

/282314