Fixes netbox-community#12355: Exclude additional characters from url …

…encode
x64x6a · Apr 26, 2023 · 4355085 · 4355085
1 parent f867cb3
commit 4355085
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/netbox/extras/models/models.py b/netbox/extras/models/models.py
@@ -279,7 +279,7 @@ def render(self, context):
         text = clean_html(text, allowed_schemes)
 
         # Sanitize link
-        link = urllib.parse.quote_plus(link, safe='/:?&')
+        link = urllib.parse.quote_plus(link, safe='/:?&=%+[]@#')
 
         # Verify link scheme is allowed
         result = urllib.parse.urlparse(link)