🟡 6. URL Parameter Not Decoded

[juancolchete]

Location: static/js/utils.js:1-13

function GetURLParameter(sParam) {
    var sPageURL = window.location.search.substring(1);
    var sURLVariables = sPageURL.split('&');
    for (var i = 0; i < sURLVariables.length; i++) {
        var sParameterName = sURLVariables[i].split('=');
        if (sParameterName[0] == sParam) {
            return sParameterName[1];  // ❌ Not decoded
        }
    }
}

Fix: Use modern URLSearchParams API:

function GetURLParameter(sParam) {
    const params = new URLSearchParams(window.location.search)
    return params.get(sParam)  // Automatically decoded
}