I just hit this trying to download artifacts from github actions,

first thing was following a redirect seems to append headers to the redirects

400 Authentication information is not given in the correct format. Check the value of Authorization header

problem is

rscd=attachment%253B%2Bfilename%253D%2522Lucee-test-cross-reference-json-test-results-1389.zip%2522

get’s re-encoded as

rscd=attachment%3B+filename%3D%22Lucee-test-cross-reference-json-test-results-1389.zip%22

cfhttp encodeurl="false" seems to help

decodeFromurl doesn’t like this either, ESAPI throws an error

Multiple (2x) encoding detected in rscd=attachment%253B%2Bfilename%253D%2522Lucee-test-cross-reference-json-test-results-1389.zip%2522