#65 Encode query parameters in the validation link.

2020-12-07 20:32:59 +03:00
parent c29fc0f0eb
commit 0d93a26e6d
1 changed files with 9 additions and 1 deletions
--- a/src/main/java/io/kamax/mxisd/http/IsAPIv1.java
+++ b/src/main/java/io/kamax/mxisd/http/IsAPIv1.java
@@ -20,11 +20,19 @@

 package io.kamax.mxisd.http;

+import static io.kamax.mxisd.util.RestClientUtils.urlEncode;
+
 public class IsAPIv1 {

    public static final String Base = "/_matrix/identity/api/v1";

    public static String getValidate(String medium, String sid, String secret, String token) {
-        return String.format("%s/validate/%s/submitToken?sid=%s&client_secret=%s&token=%s", Base, medium, sid, secret, token);
+        return String.format("%s/validate/%s/submitToken?sid=%s&client_secret=%s&token=%s",
+            Base,
+            medium,
+            urlEncode(sid),
+            urlEncode(secret),
+            urlEncode(token)
+        );
    }
 }