From 71e407187146f5f5cafd20ec80c666506542972f Mon Sep 17 00:00:00 2001
From: WithoutPants <53250216+WithoutPants@users.noreply.github.com>
Date: Tue, 21 Oct 2025 19:04:44 +1100
Subject: [PATCH] Encode credentials during login (#6163)

---
 ui/login/login.html | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/ui/login/login.html b/ui/login/login.html
index 32787fc91..62b8ffdc8 100644
--- a/ui/login/login.html
+++ b/ui/login/login.html
@@ -44,7 +44,8 @@
         xhr.onerror = function() {
             document.getElementsByClassName("login-error")[0].innerHTML = localeStrings.internal_error;
         };
-        xhr.send("username=" + username + "&password=" + password + "&returnURL=" + returnURL);
+        var body = "username=" + encodeURIComponent(username) + "&password=" + encodeURIComponent(password) + "&returnURL=" + encodeURIComponent(returnURL);
+        xhr.send(body);
     }
 </script>