Query Parameters Not Properly Encoded

[marvillage]

The query_params argument is passed directly to the Request constructor without encoding. If query_params is a dictionary, it needs to be converted to a query string format before being set as the query_string.

[suryabulusu]

The code has been working for a while and we didn't notice any bugs. Can you try attacking and breaking the system? I can share env details if you are interested! Thanks!

[marvillage]

Yes, im interested will surely try to penetrates it if u share the env details

…

On Fri, 25 Oct, 2024, 12:04 pm Surya Bulusu, ***@***.***> wrote: The code has been working for a while and we didn't notice any bugs. Can you try attacking and breaking the system? I can share env details if you are interested! Thanks! — Reply to this email directly, view it on GitHub <#66 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/A5ENSM2D5QABWVJEQLPB4UDZ5HQ7HAVCNFSM6AAAAABQOKBQ3CVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDIMZWHE4TENRUGE> . You are receiving this because you authored the thread.Message ID: ***@***.***>

-- *The content of this email is confidential and intended for the recipient specified in message only. It is strictly forbidden to share any part of this message with any third party, without a written consent of the sender. If you received this message by mistake, please reply to this message and follow with its deletion, so that we can ensure such a mistake does not occur in the future.*