Join GitHub today
GitHub is home to over 50 million developers working together to host and review code, manage projects, and build software together.
Sign upGitHub is where the world builds software
Millions of developers and companies build, ship, and maintain their software on GitHub — the largest and most advanced development platform in the world.
Checklist
Verbose log
Description
Page https://cdn.kamua.com/view/media/4a14378d-7b9c-43b9-aafe-f34e405d32c9 contains a URL link to a signed google cloud storage video.
The
srcof the<video>ishttps://storage.googleapis.com/kamua-media/4a14378d-7b9c-43b9-aafe-f34e405d32c9%2F720p.mp4?...[signature]...but after the webpage passes throughcompat_urllib_parse_unquote, the url transforms inhttps://storage.googleapis.com/kamua-media/4a14378d-7b9c-43b9-aafe-f34e405d32c9/720p.mp4?...[signature]...(%2F->/) which breaks the signature.I think the strings in quotes on the webpage should not have their characters escaped