Sanitize PE redirect locations for ByteString safety

[kentcdodds]

Summary

• decode and re-encode progressive enhancement redirect locations to avoid double-encoding
• keep redirect sanitization while preserving percent-encoded paths

Testing

• npm run test
• Manual: node check for encodeURI(decodeURI(safeRedirect('/foo%20bar')))

  

[cursor]

Cursor Agent can help with this pull request. Just @cursor in comments and I'll start working on changes in this branch.
_{Learn more about Cursor Agents}

[nx-cloud]

View your CI Pipeline Execution ↗ for commit 864a3e6

Command	Status	Duration	Result
nx run-many --target typecheck	✅ Succeeded	12s	View ↗
nx run-many --target build	✅ Succeeded	41s	View ↗
nx lint	✅ Succeeded	27s	View ↗

---

☁️ Nx Cloud last updated this comment at 2026-05-01 15:45:17 UTC

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 8fb187a. Configure here.}