JSoup 1.15.4 and 1.16.1 is decoding my urlencoded string

[michaelarnauts]

I'm using Jsoup.connect(url) with an url http://xxx/api/test/%2B32123, but Jsoup is making the request as http://xxx/api/test/+32123, causing it to be interpreted as 32123 by the backend.

This looks related to #1914, #1902, #1936 and #1928.

Downgrading to 1.15.3 works.

[ntinnemeier]

I am experiencing a similar case that probably has the same cause as this issue. We are passing in a URL of the form: http://xxx/api/123+456. The URLBuilder decodes the URL path:
URI uri = new URI(..., decodePart(this.u.getPath()), ...);

which yields: http://xxx/api/123 456

That is, the plus sign is converted to a space.

Afaik, plus signs in a path shouldn't be encoded (see for example https://stackoverflow.com/questions/2678551/when-should-space-be-encoded-to-plus-or-20 and https://www.baeldung.com/java-url-encoding-decoding).

In 1.15.3 the plus sign wasn't decoded to a space and the URL still works fine.
Also, encoding the plus sign as %2B works as the decoding will decode it to a plus sign. (But I don't think that's a proper solution.)

[jhy]

Thanks for the report and apologies for the issue! Have fixed this by reverting to the previous behavior of not encoding supplied paths, other than normalizing to ASCII.

[michaelarnauts]

Thanks for your fix! We had pinned the version to 1.15.3 until now, and updating to 1.17.1 works just fine.

[jhy]

That's great, thanks for confirming.