Ved Chaudhari 8cf60c5db1 querystring: fix value decoding after encoded keys ...

In the non-default parse() path, a key with more than one percent
escape could corrupt non-ASCII characters in its value.

Keep key characters out of the value's encoding check.

Assisted-by: claude:opus-5.5
Signed-off-by: vedchaudhari <vedc2853@gmail.com>
PR-URL: https://github.com/nodejs/node/pull/66553
Refs: https://github.com/nodejs/node/pull/66175
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>

2026-10-13 07:48:55 +00:00

..

assert

assert: add assert/strict alias module

2020-06-25 08:37:48 -07:00

bench

lib: implement bench/reporters

2026-09-03 15:37:21 +00:00

dns

dns: make promise API fully constructed from lib/internal/dns/promises

2022-06-20 19:58:45 +01:00

fs

fs: add fs/promises alias module

2020-02-18 22:15:50 -08:00

inspector

lib: revert to using default derived class constructors

2025-08-30 14:28:10 +00:00

internal

lib: fix AbortSignal.any() nested composite leak

2026-10-12 06:41:16 +00:00

net

net: add experimental net/promises API

2026-07-28 19:29:48 +00:00

path

path: add path/posix and path/win32 alias modules

2020-10-20 14:27:31 +00:00

readline

lib: revert to using default derived class constructors

2025-08-30 14:28:10 +00:00

stream

stream: add dump()/dumpSync() for stream/iter

2026-10-07 20:01:29 +00:00

test

lib,tools: add node-core/func-name-matching lint rule

2026-07-14 15:30:56 +02:00

timers

lib: remove unnecessary optional chaining

2024-11-07 15:59:12 +00:00

util

util: add util/types alias module

2020-10-21 01:26:34 +02:00

zlib

stream: add stream/iter Implementation

2026-03-27 19:55:08 -07:00

_http_agent.js

http: fix keylog listener setup on existing agent sockets

2026-08-17 19:01:56 +00:00

_http_client.js

http: normalize CONNECT request paths

2026-09-26 14:02:54 +00:00

_http_common.js

http: add httpValidation option to configure header value validation

2026-05-30 08:10:58 +00:00

_http_incoming.js

benchmark: fix shadowing that broke h=20 on incoming_headers benchmark

2026-09-26 18:27:41 +00:00

_http_outgoing.js

http: reduce raw header name allocations

2026-10-12 09:13:52 +00:00

_http_server.js

http: pass maxHeaderPairs to parser.initialize()

2026-09-25 21:29:33 +00:00

assert.js

lib: prefer call() over apply() if argument list is not array

2025-11-23 08:45:46 +00:00

async_hooks.js

async_hooks: remove legacy AsyncLocalStorage implementation

2026-10-03 06:41:28 +00:00

bench.js

lib: add runFile api to node:bench

2026-09-05 02:49:02 +00:00

buffer.js

buffer: add isLatin1

2026-09-28 04:22:37 +00:00

child_process.js

child_process: propagate config-file permission flags to children

2026-10-08 20:58:31 +00:00

cluster.js

cluster: use ObjectPrototypeHasOwnProperty

2023-05-25 16:04:19 +00:00

console.js

console: split console into global.js and constructor.js

2018-12-02 04:51:18 +08:00

constants.js

lib: flatten access to primordials

2019-11-25 10:28:15 +01:00

crypto.js

crypto: add crypto.parsePKCS12()

2026-09-12 11:52:10 +00:00

dgram.js

dgram: don't swallow bind errors when callback is provided

2026-08-23 02:39:15 +00:00

diagnostics_channel.js

diagnostics_channel: fix default callback context

2026-10-11 07:07:49 +00:00

dns.js

dns: validate address type in lookupService

2026-08-21 00:50:05 +00:00

domain.js

domain: runtime-deprecate the module

2026-09-03 11:40:52 +02:00

dtls.js

lib,src: apply multiple updates to dtls implementation

2026-09-16 00:39:35 +00:00

eslint.config_partial.mjs

Revert "deps,lib,tools: remove jitless and lite modes"

2026-10-05 11:25:07 +00:00

events.js

events: avoid retaining removed event names

2026-07-13 23:32:39 +00:00

ffi.js

ffi: fix exportArrayBuffer type check

2026-10-04 03:56:13 +00:00

fs.js

fs: fix crash on negative zero file descriptor

2026-09-26 19:52:53 +00:00

http2.js

http2: add server handshake utility

2024-01-12 16:09:48 +00:00

http.js

http: add websocketMask() and websocketUnmask()

2026-10-06 11:36:02 +00:00

https.js

https: handle invalid TLS options in proxied requests

2026-09-20 19:14:24 +00:00

inspector.js

inspector: initial support storage inspection

2026-01-23 14:51:48 +00:00

module.js

lib: allow skipping source maps in node_modules

2025-01-23 22:44:10 +00:00

net.js

net: race family autoselection attempts

2026-10-05 21:26:47 +00:00

os.js

os: freeze signals constant

2025-12-22 16:14:46 +00:00

path.js

path: remove StringPrototypeCharCodeAt from some methods of posix

2026-09-09 10:04:41 +02:00

perf_hooks.js

perf_hooks: implement SlidingWindowHistogram

2026-09-14 16:12:37 +00:00

process.js

src: disambiguate terms used to refer to builtins and addons

2022-08-09 01:36:49 +08:00

punycode.js

lib,src: isInsideNodeModules should test on the first non-internal frame

2025-12-10 13:59:35 +00:00

querystring.js

querystring: fix value decoding after encoded keys

2026-10-13 07:48:55 +00:00

quic.js

quic: fix broken listEndpoints export, test callbacks & nghttp3 include

2026-06-14 13:06:39 +00:00

readline.js

readline: reduce createInterface overhead

2026-07-24 09:09:01 -07:00

repl.js

repl: add basic syntax highlighting

2026-07-25 23:56:46 -07:00

sea.js

sea: implement sea.getAssetKeys()

2025-09-04 11:58:50 +00:00

sqlite.js

sqlite: rename DatabaseSync and StatementSync

2026-09-26 00:03:45 +00:00

stream.js

stream: export namespace object from internal end-of-stream module

2026-01-23 11:47:27 +00:00

string_decoder.js

meta: enable jsdoc/check-tag-names rule

2025-07-18 09:28:21 +00:00

sys.js

lib: add node: prefix in sys module deprecation warning

2025-05-26 14:39:25 +00:00

test.js

test_runner: add getTestContext()

2026-04-01 10:09:41 +00:00

timers.js

timers: do not retain a reference to the async store after firing

2026-07-19 18:30:06 +00:00

tls.js

tls: throw on invalid ALPNProtocols instead of aborting

2026-08-24 14:31:20 +00:00

trace_events.js

trace_events: fix abort when Node.js does not own the V8 platform

2026-09-18 15:23:28 +00:00

tty.js

tty: add raw-vt and io raw modes

2026-08-23 15:52:12 +00:00

url.js

url: suppress warnings from url.format/url.resolve inside node_modules

2026-03-08 18:32:29 +00:00

util.js

util,assert: expose util.isPartialDeepStrictEqual()

2026-09-25 15:36:32 +00:00

v8.js

lib: use Float16Array from primordials

2026-09-03 11:48:46 +02:00

vfs.js

vfs: add ComposableProvider for layered mounts

2026-10-05 05:17:09 +00:00

vm.js

lib: add lint rule to enforce use of kEmptyObject

2026-06-10 10:56:56 +00:00

wasi.js

lib: add lint rule to enforce use of kEmptyObject

2026-06-10 10:56:56 +00:00

worker_threads.js

lib: load fewer builtins when bootstrapping without a snapshot

2026-08-22 17:07:39 +00:00

zlib.js

zlib: fix abort with decodeStrings: false

2026-09-29 21:48:17 +00:00