diff --git a/modules/ROOT/pages/8.1.0-release-notes.adoc b/modules/ROOT/pages/8.1.0-release-notes.adoc index 3e7a6181b4..f99967dc58 100644 --- a/modules/ROOT/pages/8.1.0-release-notes.adoc +++ b/modules/ROOT/pages/8.1.0-release-notes.adoc @@ -109,6 +109,24 @@ The following premium plugin updates were released alongside {productname} {rele // CCFR here. +=== Links inserted with `+&+` encoding are now decoded to `&` before inserting +// #TINY-12504 + +Previously, when pasting URLs containing encoded ampersands `+&+` into {productname}, the encoded values were preserved, resulting in double encoding when the link was inserted into content. For example, a pasted link such as + +[source,text] +---- +https://example.com/search?&query=example +---- +would appear in the editor source as + +[source,text] +---- +https://example.com/search?&query=example +---- + +This caused issues when opening such links, as the URLs became invalid. In {release-version}, {productname} now automatically decodes `+&+` back to `+&+` before inserting the link, ensuring that pasted URLs remain valid and functional in both the editor and the source code. + [[security-fixes]] == Security fixes