Drupal has a problem when clean urls are enabled.
Because mod_rewrite decodes the url query, anything in the query needs to be double encoded. The old code, and the code in the CVS patch you showed, only double encodes '%2f', '%26' and '%23' (most commonly used in URLs). However, it should double encode .
This problem can be seen with an attached file with a '+' in the name (eg, an attachment called 'apples+oranges.png'). This turns into '%2b' but the percent sign is not double encoded like it should be, and the link is broken with clean urls enabled.
This is corrected by the attached patch.
Closed: outdated
6.0 ⚰️
It restores functionality that was present in earlier versions.
Changes an existing API or subsystem. Not backportable to earlier major versions, unless absolutely required to fix a critical bug.
Not all content is available!
It's likely this issue predates Contrib.social: some issue and comment data are missing.
See https://github.com/d6lts/drupal/pull/79 for Drupal 6 LTS if you're running into
AH: Unsafe URL with %3f URL rewritten without UnsafeAllow3F, referer: ...
Apache errors after Apache updates: https://support.plesk.com/hc/en-us/articles/13302819141783-Domain-in-Ple...