Added decoding to URL elements.

umami-software · Mar 8, 2025 · 833de1a · 833de1a
1 parent 1b21f26
commit 833de1a
Showing 1 changed file with 4 additions and 3 deletions.
diff --git a/src/app/api/send/route.ts b/src/app/api/send/route.ts
@@ -10,6 +10,7 @@ import { createToken, parseToken } from '@/lib/jwt';
 import { secret, uuid, hash } from '@/lib/crypto';
 import { COLLECTION_TYPE } from '@/lib/constants';
 import { anyObjectParam, urlOrPathParam } from '@/lib/schema';
+import { safeDecodeURI, safeDecodeURIComponent } from '@/lib/url';
 import { createSession, saveEvent, saveSessionData } from '@/queries';
 
 const schema = z.object({
@@ -168,12 +169,12 @@ export async function POST(request: Request) {
         websiteId,
         sessionId,
         visitId,
-        urlPath,
+        urlPath: safeDecodeURI(urlPath),
         urlQuery,
-        referrerPath,
+        referrerPath: safeDecodeURI(referrerPath),
         referrerQuery,
         referrerDomain,
-        pageTitle: title,
+        pageTitle: safeDecodeURIComponent(title),
         eventName: name,
         eventData: data,
         hostname: hostname || urlDomain,