From afd0b4f36d69a0d6b93873d7c99fff16997a3bc7 Mon Sep 17 00:00:00 2001 From: AlexSanchez-bit Date: Thu, 16 Oct 2025 10:56:40 -0400 Subject: [PATCH 1/2] fix[frontend](web_console): sanitized password parameter to admit all utf8 characters even url structure ones --- frontend/src/app/core/auth/account.service.ts | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/frontend/src/app/core/auth/account.service.ts b/frontend/src/app/core/auth/account.service.ts index 1631572ca..02ec14cb5 100644 --- a/frontend/src/app/core/auth/account.service.ts +++ b/frontend/src/app/core/auth/account.service.ts @@ -37,7 +37,8 @@ export class AccountService { } checkPassword(password: string, uuid: string): Observable> { - return this.http.get(SERVER_API_URL + `api/check-credentials?password=${password}&checkUUID=${uuid}`, { + const sanitized_password = encodeURIComponent(password) + return this.http.get(SERVER_API_URL + `api/check-credentials?password=${sanitized_password}&checkUUID=${uuid}`, { observe: 'response', responseType: 'text' }); From cd47f703da77f52d71d66a75b1cc7a1a1de033e7 Mon Sep 17 00:00:00 2001 From: Manuel Abascal Date: Fri, 31 Oct 2025 09:04:46 -0500 Subject: [PATCH 2/2] Update frontend/src/app/core/auth/account.service.ts Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- frontend/src/app/core/auth/account.service.ts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/frontend/src/app/core/auth/account.service.ts b/frontend/src/app/core/auth/account.service.ts index 02ec14cb5..194090805 100644 --- a/frontend/src/app/core/auth/account.service.ts +++ b/frontend/src/app/core/auth/account.service.ts @@ -37,8 +37,8 @@ export class AccountService { } checkPassword(password: string, uuid: string): Observable> { - const sanitized_password = encodeURIComponent(password) - return this.http.get(SERVER_API_URL + `api/check-credentials?password=${sanitized_password}&checkUUID=${uuid}`, { + const body = { password, checkUUID: uuid }; + return this.http.post(SERVER_API_URL + 'api/check-credentials', body, { observe: 'response', responseType: 'text' });