From b3e76ef21779b7aab4969260059780ab04e22ad4 Mon Sep 17 00:00:00 2001
From: Sergey Nechaev <slow_cheetah@inbox.ru>
Date: Tue, 13 Aug 2024 01:25:11 +0700
Subject: [PATCH] Percent decode

---
 packages/core-js/modules/web.url-search-params.constructor.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/packages/core-js/modules/web.url-search-params.constructor.js b/packages/core-js/modules/web.url-search-params.constructor.js
index e5962b86c2df..f55774051a37 100644
--- a/packages/core-js/modules/web.url-search-params.constructor.js
+++ b/packages/core-js/modules/web.url-search-params.constructor.js
@@ -154,6 +154,10 @@ var decode = function (input) {
 
           var nextByte = parseHexOctet(input, i + 1);
 
+          if (nextByte > 191 || nextByte < 128) {  // incorrect next byte
+            break;
+          }
+
           if (isNaN(nextByte)) {
             i += 3;
             break;