"#" sign in directory name causes error by uploading files inside it

[elizavetaRa]

Steps to reproduce

1. Create a directory and name it "test with # folder"
2. Open directory
3. Upload a file

Expected behaviour

File gets uploaded

Actual behaviour

Request call POST
https://ocis.ocis-traefik.latest.owncloud.works/remote.php/dav/spaces/0ef049e8-a2a9-4d3d-9aec-3ad647a0e1e9$1cd70506-913a-4f89-bf4c-923e354ce128/test with : starting with "#" url gets cut.

At CERNBox request call PUT https://cernbox.cern.ch/remote.php/dav/files/ragozina/eos/user/r/ragozina/test with returns 204 and creates a file "test with" in parent directory.

Possibly the same bug for some other signs?

[dschmidt]

Can you "copy as cURL" the failing request from the developer tools?

[elizavetaRa]

  curl 'https://ocis.ocis-traefik.latest.owncloud.works/remote.php/dav/spaces/0ef049e8-a2a9-4d3d-9aec-3ad647a0e1e9$1cd70506-913a-4f89-bf4c-923e354ce128/test%20with%20' \
  -H 'authority: ocis.ocis-traefik.latest.owncloud.works' \
  -H 'accept: */*' \
  -H 'accept-language: en' \
  -H 'authorization: Bearer eyJhbGciOiJQUzI1NiIsImtpZCI6InByaXZhdGUta2V5IiwidHlwIjoiSldUIn0.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.lA3D8DRoYLhP7u5yd28uhcTgXItnpFD6nTq8Hsqm_WlFEAcE_7_vndU5-8034RdsLurkQFBkg0btDciHxvBOXEeGZPOo01b4igWOTTS5A5kb0YjTplhfUY-64pAeL82QyuMMx-QMaTN3F7iIjA8vKCDAYksDrl7lH43l-ntTDAhfKmlXX8K_urMYZHAP9R39AQIeJ5IABSQlYtcrW_Jl14jUBYIRzWApPjGdJWvhlayz-bMJQQikyvsD61WzC4SllK-tkcmMFqOHoX5Cr8Ie4JIW898GutWteTPisV5RJAYPCHGxEk9RVq2icFlt6dquKjbQrqu6_9R76-nAaIdQKASmg3DMG0p3y41uEHQ2FeVTmbs3cAfesU_kIoZLXm854kwVqPmwu-5CN0hiS0Sh0yXVadIbI93RllBS67TB94HIupb0uoDBFZ4wwBwTqS4e4rZlmmjt9rfpoYXUS3h6fscSyUJ-3JMIOpjm1_5FL1rxWwwNeAijVXpwZ1bKTlkHaEXsOVIVAOyAi-_Yyh6TbhweBOYWHNpWLZ5An-PnIDtPcz9bSuFPVoQq_fpCTdOwJ1B-p0peKgXc7N2Fv5wt9PKYtlQXfYQv0p5okUPun9fxj1AIs7N_PDaSW11ThqSyRNZW31u56BpacH76e-8HjHssQuoHKNlwuj_BneZSvGI' \
  -H 'cache-control: no-cache' \
  -H 'content-type: application/offset+octet-stream' \
  -H 'origin: https://ocis.ocis-traefik.latest.owncloud.works' \
  -H 'pragma: no-cache' \
  -H 'referer: https://ocis.ocis-traefik.latest.owncloud.works/files/spaces/personal/admin/test%20with%20%23%20folder?fileId=0ef049e8-a2a9-4d3d-9aec-3ad647a0e1e9%241cd70506-913a-4f89-bf4c-923e354ce128%21ca4f1581-7042-437d-9f50-09967737383d&items-per-page=10&view-mode=resource-table&tiles-size=1' \
  -H 'sec-ch-ua: "Chromium";v="112", "Google Chrome";v="112", "Not:A-Brand";v="99"' \
  -H 'sec-ch-ua-mobile: ?0' \
  -H 'sec-ch-ua-platform: "Linux"' \
  -H 'sec-fetch-dest: empty' \
  -H 'sec-fetch-mode: cors' \
  -H 'sec-fetch-site: same-origin' \
  -H 'tus-resumable: 1.0.0' \
  -H 'upload-length: 383095' \
  -H 'upload-metadata: spaceId MGVmMDQ5ZTgtYTJhOS00ZDNkLTlhZWMtM2FkNjQ3YTBlMWU5JDFjZDcwNTA2LTkxM2EtNGY4OS1iZjRjLTkyM2UzNTRjZTEyOA==,spaceName UGVyc29uYWw=,driveAlias cGVyc29uYWwvYWRtaW4=,driveType cGVyc29uYWw=,currentFolder L3Rlc3Qgd2l0aCAjIGZvbGRlcg==,currentFolderId MGVmMDQ5ZTgtYTJhOS00ZDNkLTlhZWMtM2FkNjQ3YTBlMWU5JDFjZDcwNTA2LTkxM2EtNGY4OS1iZjRjLTkyM2UzNTRjZTEyOCFjYTRmMTU4MS03MDQyLTQzN2QtOWY1MC0wOTk2NzczNzM4M2Q=,uppyId dXBweS1rYXR6ZS8xL3BuZy0xZC0xZS1pbWFnZS9wbmctMzgzMDk1LTE2NjkzODQ2NDYwMDA=,relativeFolder ,relativePath dW5kZWZpbmVk,tusEndpoint aHR0cHM6Ly9vY2lzLm9jaXMtdHJhZWZpay5sYXRlc3Qub3duY2xvdWQud29ya3MvcmVtb3RlLnBocC9kYXYvc3BhY2VzLzBlZjA0OWU4LWEyYTktNGQzZC05YWVjLTNhZDY0N2EwZTFlOSQxY2Q3MDUwNi05MTNhLTRmODktYmY0Yy05MjNlMzU0Y2UxMjgvdGVzdCB3aXRoICMgZm9sZGVy,uploadId N2M5N2ZiNjMtOWU3NS00NjhhLWFlMjYtNTg2NjVjZmI1ZWI4,topLevelFolderId dW5kZWZpbmVk,routeName ZmlsZXMtc3BhY2VzLWdlbmVyaWM=,routeDriveAliasAndItem cGVyc29uYWwvYWRtaW4vdGVzdCB3aXRoICMgZm9sZGVy,routeShareId ,name S2F0emUtMS5wbmc=,type aW1hZ2UvcG5n,mtime MTY2OTM4NDY0Ng==,filetype aW1hZ2UvcG5n,filename S2F0emUtMS5wbmc=' \
  -H 'user-agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36' \
  -H 'x-request-id: 067f87b2-9cd7-4984-9af5-ecb193999d6b' \
  --data-raw $'\u0089PNG\r\n\u001a\n\u0000\u0000\u0000\rIHDR\u0000\u0000\u0006v\u0000\u000....