refactor: Add internal method Utils.encodeForUrl for properly encoding email addresses for use in URLs

[dblythy]

Pull Request

• Report security issues confidentially.
• Any contribution is under this license.
• Link this pull request to an issue.

Issue

Closes: #9111

Approach

Tasks

• Add tests

[parse-github-assistant]

I will reformat the title to use the proper commit message syntax.

[parse-github-assistant]

Thanks for opening this pull request!

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 93.55%. Comparing base (6258a6a) to head (60bcbfa).
Report is 2 commits behind head on alpha.

Additional details and impacted files

@@           Coverage Diff           @@
##            alpha    #9541   +/-   ##
=======================================
  Coverage   93.55%   93.55%           
=======================================
  Files         186      186           
  Lines       14838    14840    +2     
=======================================
+ Hits        13881    13883    +2     
  Misses        957      957           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[mtrezza]

@mathieulb does this address the issue you described?

[mtrezza]

@dblythy Does #8488 effectively make this PR obsolete? Or does it still make senes to add this improved escaping logic, since we can't predict what URLs we'll have in the future.

[mathieulb]

@mtrezza , it addresses the specific example problem I encountered, but I confirm that it seems to not handle dot, comma, etc., as you suspect, because they are supposed to be in the regexp. PR 8488 would make this PR 9541 obsolete, but PR 9541 isn't obsolete until PR 8488 gets accepted, obviously.

If for any reason PR 8488 shouldn't be accepted instead, PR 9541 should get more tests with creative ascii art at the end of the username, to cover all ASCII characters that I listed in the comments of #9111 : !"'),.:;<>?]^}. This was tested in GMail. Codepoints outside of the pure ASCII range (32..126) are already covered by encodeURIComponent.

[mtrezza]

Then let's merge this PR as it's almost done. Do you have any additional feedback on the PR as it is now?

I confirm that it seems to not handle dot, comma, etc., as you suspect, because they are supposed to be in the regexp.

Does your comment belong to #9541 (comment)?

[mathieulb]

mtrezza, I was mainly replying to "does this address the #9111 you described?" which was directed at me, but this also involved referring to the other thread you mention now ("How does it handle dot, comma, etc after the URL?").

I don't have additional feedback (I'm not familiar with the parse source & tests, and I'm not set up to try parse from git at the moment)

[mtrezza]

The username has been removed from the password reset process in #8488. Refactored the test to at least keep the Utils.encodeForUrl method for future use.