From 41e7235ccf8094ca38ee06be42755a8979566714 Mon Sep 17 00:00:00 2001 From: Kory Prince Date: Sun, 25 Mar 2018 02:34:59 -0500 Subject: [PATCH] use encodeURIComponent to encode API password (#1027) --- hassio/snapshots/hassio-snapshot.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/hassio/snapshots/hassio-snapshot.html b/hassio/snapshots/hassio-snapshot.html index f28181d8f5..483c9167db 100644 --- a/hassio/snapshots/hassio-snapshot.html +++ b/hassio/snapshots/hassio-snapshot.html @@ -226,7 +226,7 @@ class HassioSnapshot extends Polymer.Element { } _computeDownloadUrl(snapshotSlug) { - const password = encodeURI(this.hass.connection.options.authToken); + const password = encodeURIComponent(this.hass.connection.options.authToken); return `/api/hassio/snapshots/${snapshotSlug}/download?api_password=${password}`; }