From 4355085124204838235ba5ab71a203fae7b2fbbd Mon Sep 17 00:00:00 2001 From: x64x6a Date: Wed, 26 Apr 2023 13:02:32 -0700 Subject: [PATCH] Fixes #12355: Exclude additional characters from url encode --- netbox/extras/models/models.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/netbox/extras/models/models.py b/netbox/extras/models/models.py index 718cba5c1..b054882ea 100644 --- a/netbox/extras/models/models.py +++ b/netbox/extras/models/models.py @@ -279,7 +279,7 @@ class CustomLink(CloningMixin, ExportTemplatesMixin, WebhooksMixin, ChangeLogged text = clean_html(text, allowed_schemes) # Sanitize link - link = urllib.parse.quote_plus(link, safe='/:?&') + link = urllib.parse.quote_plus(link, safe='/:?&=%+[]@#') # Verify link scheme is allowed result = urllib.parse.urlparse(link)