decode PGN from URL - closes #16286

lichess-org · Nov 6, 2024 · b6350c4 · b6350c4
1 parent ae2b345
commit b6350c4
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/app/controllers/UserAnalysis.scala b/app/controllers/UserAnalysis.scala
@@ -54,11 +54,16 @@ final class UserAnalysis(
   def pgn(pgn: String) = Open:
     val pov         = makePov(none, Standard)
     val orientation = get("color").flatMap(Color.fromName) | pov.color
+    val decodedPgn =
+      lila.common.String
+        .decodeUriPath(pgn.take(5000))
+        .map(_.replace("_", " ").replace("+", " ").trim)
+        .filter(_.nonEmpty)
     Ok.async:
       env.api.roundApi
         .userAnalysisJson(pov, ctx.pref, none, orientation, owner = false)
         .map: data =>
-          views.board.userAnalysis(data, pov, inlinePgn = pgn.replace("_", " ").some)
+          views.board.userAnalysis(data, pov, inlinePgn = decodedPgn)
     .map(_.enforceCrossSiteIsolation)
 
   private[controllers] def makePov(fen: Option[Fen.Full], variant: Variant): Pov =