I'm writing here because I opened an issue a month ago https://github.com/owncloud/android/issues/1842 and nobody seems to acknowledge that:
When I create a share link and put Hello%20World as share password the client doesn't encode the value and sends it without any change to the server.
So, when I navigate to the url returned by the server and introduce Hello%20World as password I get password authentication error... The password that I should introduce to get access is Hello World
Other example (hacking the request)
If I choose Hello&publicUpload=true as password -> The server takes Hello as password AND set allow editing
The password should be exactly what I typed
Steps to reproduce
The password parameter in https://doc.owncloud.org/server/9.1/developer_manual/core/ocs-share-api.html#update-share is sent by the android client to the Server without x-www-form-encoding
The windows desktop client is sending the password in the right way , so the server doesn't get messed up
Can this problem be reproduced with the official owncloud server?
(url: https://demo.owncloud.org, user: test, password: test)
Stock or customized system:
ownCloud app version:
ownCloud server version:
Web server error log
ownCloud log (data/owncloud.log)