cfhttpparam doesn't offer a way to turn off encoding for form fields.

Description

We ran into this issue when sending a return URL to PayPal. The URL is presented back to the user to click on, but it doesn't work, as PayPal does not decode the form field that contains the URL, and there is no way to tell Lucee NOT to encode the form field. Adobe ColdFusion allows the "encoded" attribute to work in tandem with a "type" attribute of "formfield" – Lucee does not.

From the Adobe ColdFusion docs for the "encoded" attribute of cfhttpparam:

Applies to FormField and CGI types; ignored for all other types. Specifies whether to URL encode the form field or header.

From the Lucee docs for the "encoded" attribute of cfhttpparam:

Applies to type "cgi" and "url", ignored for all other types. Specifies whether to URL encode the the values defined with the tag, but only if necessary (no double encoding).

Why is there no way to turn off encoding for form fields when POSTing them?

Environment

Windows 2012 and 2016, 64-bit.

Assignee

Michael Offner

Reporter

Andy Tyrone

Priority

Major

Fix versions

None

Affects versions

Configure