From 88ccd1443823cdeaec66b0f04f76228996460b8b Mon Sep 17 00:00:00 2001
From: Jakub Maruszczak <101405074+kubamaruszczak@users.noreply.github.com>
Date: Thu, 14 Aug 2025 14:38:56 +0200
Subject: [PATCH] encode nodeid parameter in connectTunnel url (#7232)

---
 meshctrl.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/meshctrl.js b/meshctrl.js
index e2d62919..8a747db8 100644
--- a/meshctrl.js
+++ b/meshctrl.js
@@ -2134,7 +2134,7 @@ function serverConnect() {
                     if ((args.id.split('/') != 3) && (settings.currentDomain != null)) { args.id = 'node/' + settings.currentDomain + '/' + args.id; }
                     var id = getRandomHex(6);
                     ws.send(JSON.stringify({ action: 'msg', nodeid: args.id, type: 'tunnel', usage: 1, value: '*/meshrelay.ashx?p=' + protocol + '&nodeid=' + args.id + '&id=' + id + '&rauth=' + data.rcookie, responseid: 'meshctrl' }));
-                    connectTunnel(url.replace('/control.ashx', '/meshrelay.ashx?browser=1&p=' + protocol + '&nodeid=' + args.id + '&id=' + id + '&auth=' + data.cookie));
+                    connectTunnel(url.replace('/control.ashx', '/meshrelay.ashx?browser=1&p=' + protocol + '&nodeid=' + encodeURIComponent(args.id) + '&id=' + id + '&auth=' + data.cookie));
                 }
                 break;
             }