0

I hope you are fine guys. I am trying to consume an API written by my colleague with the use of AngularJS $http. It is a PATCH method type. One of the parameters is passed in the URL (SomeMethod/User/FHD&TE) and the other one in the body (JSON). The one in the body is obviously fine, but there is an issue with the one that is passed in the URL, due to some special characters coming up in there from time to time. The API response code is 400 and it says "A potentially dangerous Request.Path value was detected from the client". I tried to use escape and encoding JS functions but none of them worked. What is more, there is an option params in the angular.http that I use to make the requests. As far as I know it takes care of encoding the parameters (solves the special characters issue), but I cannot use it, cause the URL would be different from the one that API expects. It would be "SomeMethod/User?FHDTE%" instead of "SomeMethod/User/FHD&TE" and obviously reply with 404. Do you now if this can be solved on the client side and if yes how can I do it? Or does it need an update of the backend?

Sample Request:

return $http({
                method: 'PATCH',
                url: ...SomeMethod/User/firstURLParameter,
                headers: { 'Content-Type': 'application/json' },
                data: { "secondBodyParameter": true }
            });
Szymon
  • 91
  • 8

1 Answers1

0

If server side is written in Nodejs try using unescape function for your recieved parameters.

var str = Need%20tips%3F%20Visit%20W3Schools%21; var str_1 = unescape(str)

where str1 result will be "Need tips? Visit W3Schools!"

Examples from w3schools https://www.w3schools.com/jsref/jsref_unescape.asp

Ameerudheen.K
  • 657
  • 1
  • 11
  • 31
  • Hey, at first, thanks a lot for your answer. Unfortunately, the back end is written in c# asp.net. I have done some more research yesterday and it looks like it cannot be achieved without updating the API. – Szymon May 23 '19 at 08:15
  • can u please checkout this, if this is the exact requirement? https://stackoverflow.com/questions/6833865/what-is-the-c-sharp-equivalent-to-javascripts-unescape – Ameerudheen.K May 23 '19 at 10:41