From: Michael Brown <mcb30@ipxe.org>
Date: Thu, 16 Jul 2026 15:31:33 +0000 (+0100)
Subject: [uri] Escape the "+" character within HTTP form parameters
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=081d235ae2ec99e3ef2b8b7847ee1930896e77cf;p=thirdparty%2Fipxe.git

[uri] Escape the "+" character within HTTP form parameters

Within application/x-www-form-urlencoded values, a "+" character needs
to be escaped to avoid its being interpreted as a space.

Signed-off-by: Michael Brown <mcb30@ipxe.org>
---

diff --git a/src/core/uri.c b/src/core/uri.c
index ea0f2bc45..824ad4085 100644
--- a/src/core/uri.c
+++ b/src/core/uri.c
@@ -151,7 +151,7 @@ static int uri_character_escaped ( char c, unsigned int field ) {
 	 */
 	static const char *escaped[URI_EPATH] = {
 		/* Scheme or default: escape everything */
-		[URI_SCHEME]	= "/#:@?=&",
+		[URI_SCHEME]	= "/#:@?=&+",
 		/* Opaque part: escape characters which would affect
 		 * the reparsing of the URI, allowing everything else
 		 * (e.g. ':', which will appear in iSCSI URIs).