Share password is not set correctly



I'm writing here because I opened an issue a month ago and nobody seems to acknowledge that:

Actual behaviour

When I create a share link and put Hello%20World as share password the client doesn't encode the value and sends it without any change to the server.
So, when I navigate to the url returned by the server and introduce Hello%20World as password I get password authentication error... The password that I should introduce to get access is Hello World

Other example (hacking the request)
If I choose Hello&publicUpload=true as password -> The server takes Hello as password AND set allow editing

Expected behaviour

The password should be exactly what I typed

Steps to reproduce

The password parameter in is sent by the android client to the Server without x-www-form-encoding
The windows desktop client is sending the password in the right way , so the server doesn't get messed up

Can this problem be reproduced with the official owncloud server?
(url:, user: test, password: test)
Don't know

Environment data

Android version:

Device model:
Nexus 5x

Stock or customized system:

ownCloud app version:
ownCloud server version:


Web server error log

ownCloud log (data/owncloud.log)


The problem is reproducible with version 2.2.0 as well. Thank you for reporting, the bug will be dealed by the mobile ownCloud team.