URL-encode branch name for safety

Copilot · alexr00 · Copilot · commit 8e48889d6af4 · 2025-12-09T11:32:35.000Z
Co-authored-by: alexr00 &lt;38270282+alexr00@users.noreply.github.com&gt;
diff --git a/src/github/createPRViewProvider.ts b/src/github/createPRViewProvider.ts
@@ -522,7 +522,7 @@ export abstract class BaseCreatePullRequestViewProvider<T extends BasePullReques
 
 		// Construct the GitHub URL for creating a PR
 		// Format: https://github.com/{owner}/{repo}/pull/new/{branch}
-		const url = `${baseRepo.remote.normalizedHost}/${baseRepo.remote.owner}/${baseRepo.remote.repositoryName}/pull/new/${compareBranch}`;
+		const url = `${baseRepo.remote.normalizedHost}/${baseRepo.remote.owner}/${baseRepo.remote.repositoryName}/pull/new/${encodeURIComponent(compareBranch)}`;
 
 		await vscode.env.openExternal(vscode.Uri.parse(url));
 	}

Original file line number	Diff line number	Diff line change
`@@ -522,7 +522,7 @@ export abstract class BaseCreatePullRequestViewProvider<T extends BasePullReques`
`522`	`522`
`523`	`523`	`// Construct the GitHub URL for creating a PR`
`524`	`524`	`// Format: https://github.com/{owner}/{repo}/pull/new/{branch}`
`525`		- const url = `${baseRepo.remote.normalizedHost}/${baseRepo.remote.owner}/${baseRepo.remote.repositoryName}/pull/new/${compareBranch}`;
	`525`	+ const url = `${baseRepo.remote.normalizedHost}/${baseRepo.remote.owner}/${baseRepo.remote.repositoryName}/pull/new/${encodeURIComponent(compareBranch)}`;
`526`	`526`
`527`	`527`	`await vscode.env.openExternal(vscode.Uri.parse(url));`
`528`	`528`	`}`