gitlab-org--gitlab-foss/changelogs/unreleased/sh-normalize-urls.yml

---
title: Escape username and password in UrlSanitizer#full_url
merge_request: 20684
author:
type: fixed
Escape username and password in UrlSanitizer#full_url If a user uses a password with certain characters (e.g. /, #, +, etc.) UrlSanitizer#full_url will generate an invalid URL that cannot be parsed properly by Addressable::URI. If used with UrlBlocker, this will be flagged as an invalid URI. 2018-07-18 01:50:08 -04:00			`---`
			`title: Escape username and password in UrlSanitizer#full_url`
			`merge_request: 20684`
			`author:`
			`type: fixed`