Handle url specials from cell data in addLinksToTables #32
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This probably addresses #31, but I encountered it independently.
When the cell contents includes URL-special characters, they should probably
not be interpreted as multiple query parameters or other such errors.
For example, with a
addLinksToTables({link_columns: ["col"], link_urls: ["http://modeanalytics?param_foo={{col}}"]})
:A+B&securityhole=true
http://modeanalytics/?param_foo=A+B&securityhole=true
http://modeanalytics/?param_foo=A%2BB%26securityhole=true
So this avoids data that is potentially sourced from external users getting
injected into the super dangerous "securityhole" parameter on another report
unintentionally.
Or more practically, when the data contains a +, it doesn't get re-interpreted
as a space by the browser.
IMO, interpreting data from a single cell in a table as multiple parameters
should be a special case that needs more coding. The simple case of expecting
the cell contents to be a single scalar value should be the default.