From 2d7cedbd5f7a286974c24d7ea85ac8cff72a42e4 Mon Sep 17 00:00:00 2001
From: uttam282005 <uttam282005@gmail.com>
Date: Fri, 6 Mar 2026 14:28:02 +0530
Subject: [PATCH 1/4] url-encode programming language filter values

Signed-off-by: uttam282005 <uttam282005@gmail.com>
---
 .../scanpipe/panels/scan_summary_panel.html          |  6 +++---
 scanpipe/templates/scanpipe/project_charts.html      |  4 ++--
 scanpipe/tests/test_api.py                           | 12 ++++++++++++
 3 files changed, 17 insertions(+), 5 deletions(-)

diff --git a/scanpipe/templates/scanpipe/panels/scan_summary_panel.html b/scanpipe/templates/scanpipe/panels/scan_summary_panel.html
index 39d3e71470..5105865d42 100644
--- a/scanpipe/templates/scanpipe/panels/scan_summary_panel.html
+++ b/scanpipe/templates/scanpipe/panels/scan_summary_panel.html
@@ -57,7 +57,7 @@
             {% for entry in scan_summary.primary_language %}
               {% if entry.value %}
                 <li>
-                  <a href="{% url 'project_resources' project.slug %}?programming_language={{ entry.value }}" target="_blank">
+                  <a href="{% url 'project_resources' project.slug %}?programming_language={{ entry.value|urlencode }}" target="_blank">
                   {{ entry.value }}
                   {% if entry.count %}
                     <span class="tag is-rounded">
@@ -123,7 +123,7 @@
           <ul>
             {% for entry in scan_summary.other_languages %}
               {% if entry.value %}
-                <a href="{% url 'project_resources' project.slug %}?programming_language={{ entry.value }}" target="_blank">
+                <a href="{% url 'project_resources' project.slug %}?programming_language={{ entry.value|urlencode }}" target="_blank">
                   <li>
                     {{ entry.value }}
                     {% if entry.count %}
@@ -163,4 +163,4 @@
       </tr>
     </table>
   </div>
-</article>
\ No newline at end of file
+</article>
diff --git a/scanpipe/templates/scanpipe/project_charts.html b/scanpipe/templates/scanpipe/project_charts.html
index 22dcaebabe..2ebe2c3de1 100644
--- a/scanpipe/templates/scanpipe/project_charts.html
+++ b/scanpipe/templates/scanpipe/project_charts.html
@@ -152,7 +152,7 @@ <h3 class="title is-4 has-text-centered mb-3">
               // Keep in sync with FilterSetUtilsMixin.(empty_value|other_value)
               if (name === "(No value detected)") name = "_EMPTY_";
               if (name === "Other") name = "_OTHER_";
-              let full_url = `${base_url}?${field}=${name}`;
+              let full_url = `${base_url}?${field}=${${encodeURIComponent(name)}`;
               if (in_package) full_url += `&in_package=${in_package}`;
               if (event.ctrlKey || event.metaKey) window.open(full_url, '_blank');
               else window.location.href = full_url;
@@ -182,4 +182,4 @@ <h3 class="title is-4 has-text-centered mb-3">
       makeChart("file_compliance_alert", "#compliance_alert_chart", "Resource\nCompliance\nAlert");
     {% endif %}
   </script>
-{% endblock %}
\ No newline at end of file
+{% endblock %}
diff --git a/scanpipe/tests/test_api.py b/scanpipe/tests/test_api.py
index 03d68cfaca..8bb5f63ef3 100644
--- a/scanpipe/tests/test_api.py
+++ b/scanpipe/tests/test_api.py
@@ -788,6 +788,18 @@ def test_scanpipe_api_project_action_resources_filterset(self):
         response = self.csrf_client.get(url + "?slug=aaa")
         self.assertEqual(2, response.data["count"])
 
+    def test_scanpipe_api_project_action_resources_filterset_special_chars(self):
+        make_resource_file(
+            self.project1,
+            path="csharp_file.cs",
+            programming_language="C#",
+        )
+        url = reverse("project-resources", args=[self.project1.uuid])
+        response = self.csrf_client.get(url + "?programming_language=C%23")
+        self.assertEqual(1, response.data["count"])
+        self.assertEqual("csharp_file.cs", response.data["results"][0]["path"])
+        self.assertEqual("C#", response.data["results"][0]["programming_language"])
+
     def test_scanpipe_api_project_action_packages(self):
         url = reverse("project-packages", args=[self.project1.uuid])
         response = self.csrf_client.get(url)

From c070d39d21274f17a38a48e8915214d63bce590e Mon Sep 17 00:00:00 2001
From: uttam282005 <uttam282005@gmail.com>
Date: Fri, 6 Mar 2026 14:40:01 +0530
Subject: [PATCH 2/4] url-encode programming language filter in resource list

Signed-off-by: uttam282005 <uttam282005@gmail.com>
---
 scanpipe/templates/scanpipe/resource_list.html | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/scanpipe/templates/scanpipe/resource_list.html b/scanpipe/templates/scanpipe/resource_list.html
index 44091f4baa..f513e2068d 100644
--- a/scanpipe/templates/scanpipe/resource_list.html
+++ b/scanpipe/templates/scanpipe/resource_list.html
@@ -54,7 +54,7 @@
               <a href="?extension={{ resource.extension }}" class="is-black-link">{{ resource.extension }}</a>
             </td>
             <td class="break-all">
-              <a href="?programming_language={{ resource.programming_language }}" class="is-black-link">{{ resource.programming_language }}</a>
+              <a href="?programming_language={{ resource.programming_language|urlencode }}" class="is-black-link">{{ resource.programming_language }}</a>
             </td>
             <td class="break-all">
               <a href="?mime_type={{ resource.mime_type }}" class="is-black-link">{{ resource.mime_type }}</a>
@@ -99,4 +99,4 @@
       {% include 'scanpipe/includes/pagination.html' with page_obj=page_obj %}
     {% endif %}
   </div>
-{% endblock %}
\ No newline at end of file
+{% endblock %}

From 5b2f22d4dfa1c9a875cc141c77f1f279c94e531f Mon Sep 17 00:00:00 2001
From: uttam282005 <uttam282005@gmail.com>
Date: Mon, 9 Mar 2026 10:49:48 +0530
Subject: [PATCH 3/4] correct syntax mistake and add tests for rendered html

Signed-off-by: uttam282005 <uttam282005@gmail.com>
---
 .../templates/scanpipe/project_charts.html    |  2 +-
 scanpipe/tests/test_views.py                  | 23 +++++++++++++++++++
 2 files changed, 24 insertions(+), 1 deletion(-)

diff --git a/scanpipe/templates/scanpipe/project_charts.html b/scanpipe/templates/scanpipe/project_charts.html
index 2ebe2c3de1..64ec15d78f 100644
--- a/scanpipe/templates/scanpipe/project_charts.html
+++ b/scanpipe/templates/scanpipe/project_charts.html
@@ -152,7 +152,7 @@ <h3 class="title is-4 has-text-centered mb-3">
               // Keep in sync with FilterSetUtilsMixin.(empty_value|other_value)
               if (name === "(No value detected)") name = "_EMPTY_";
               if (name === "Other") name = "_OTHER_";
-              let full_url = `${base_url}?${field}=${${encodeURIComponent(name)}`;
+              let full_url = `${base_url}?${field}=${encodeURIComponent(name)}`;
               if (in_package) full_url += `&in_package=${in_package}`;
               if (event.ctrlKey || event.metaKey) window.open(full_url, '_blank');
               else window.location.href = full_url;
diff --git a/scanpipe/tests/test_views.py b/scanpipe/tests/test_views.py
index 63e9b9f295..09603c5316 100644
--- a/scanpipe/tests/test_views.py
+++ b/scanpipe/tests/test_views.py
@@ -590,6 +590,18 @@ def test_scanpipe_views_project_details_scan_summary_panels(self):
         self.assertContains(response, expected1)
         self.assertContains(response, expected2)
 
+    def test_scanpipe_views_project_details_scan_summary_language_url_encoding(self):
+        summary_file = self.project1.get_output_file_path("summary", "json")
+        scan_summary_json = {
+            "primary_language": [{"value": "C#", "count": 1}],
+            "other_languages": [{"value": "C#", "count": 1}],
+        }
+        summary_file.write_text(json.dumps(scan_summary_json))
+        url = self.project1.get_absolute_url()
+        response = self.client.get(url)
+        self.assertContains(response, "?programming_language=C%23")
+        self.assertNotContains(response, "?programming_language=C#")
+
     def test_scanpipe_views_project_details_get_license_clarity_data(self):
         get_license_clarity_data = ProjectDetailView.get_license_clarity_data
 
@@ -1039,6 +1051,17 @@ def test_scanpipe_views_codebase_resource_list_view_bad_search_query(self):
         expected_error = "The provided search value is invalid: No closing quotation"
         self.assertContains(response, expected_error)
 
+    def test_scanpipe_views_codebase_resource_list_programming_language_url_encoding(
+        self,
+    ):
+        make_resource_file(
+            self.project1, path="csharp_file.cs", programming_language="C#"
+        )
+        url = reverse("project_resources", args=[self.project1.slug])
+        response = self.client.get(url)
+        self.assertContains(response, "?programming_language=C%23")
+        self.assertNotContains(response, "?programming_language=C#")
+
     def test_scanpipe_views_codebase_resource_details_view_tab_image(self):
         resource1 = make_resource_file(self.project1, "file1.ext")
         response = self.client.get(resource1.get_absolute_url())

From 5c2f9622f1ef23444ea13f33620fe4c49a9635e2 Mon Sep 17 00:00:00 2001
From: uttam282005 <uttam282005@gmail.com>
Date: Mon, 9 Mar 2026 11:37:23 +0530
Subject: [PATCH 4/4] remove EOF newlines

Signed-off-by: uttam282005 <uttam282005@gmail.com>
---
 scanpipe/templates/scanpipe/panels/scan_summary_panel.html | 2 +-
 scanpipe/templates/scanpipe/project_charts.html            | 2 +-
 scanpipe/templates/scanpipe/resource_list.html             | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/scanpipe/templates/scanpipe/panels/scan_summary_panel.html b/scanpipe/templates/scanpipe/panels/scan_summary_panel.html
index 5105865d42..1407efcfe1 100644
--- a/scanpipe/templates/scanpipe/panels/scan_summary_panel.html
+++ b/scanpipe/templates/scanpipe/panels/scan_summary_panel.html
@@ -163,4 +163,4 @@
       </tr>
     </table>
   </div>
-</article>
+</article>
\ No newline at end of file
diff --git a/scanpipe/templates/scanpipe/project_charts.html b/scanpipe/templates/scanpipe/project_charts.html
index 64ec15d78f..37f3d0a42c 100644
--- a/scanpipe/templates/scanpipe/project_charts.html
+++ b/scanpipe/templates/scanpipe/project_charts.html
@@ -182,4 +182,4 @@ <h3 class="title is-4 has-text-centered mb-3">
       makeChart("file_compliance_alert", "#compliance_alert_chart", "Resource\nCompliance\nAlert");
     {% endif %}
   </script>
-{% endblock %}
+{% endblock %}
\ No newline at end of file
diff --git a/scanpipe/templates/scanpipe/resource_list.html b/scanpipe/templates/scanpipe/resource_list.html
index f513e2068d..6bf10b8c54 100644
--- a/scanpipe/templates/scanpipe/resource_list.html
+++ b/scanpipe/templates/scanpipe/resource_list.html
@@ -99,4 +99,4 @@
       {% include 'scanpipe/includes/pagination.html' with page_obj=page_obj %}
     {% endif %}
   </div>
-{% endblock %}
+{% endblock %}
\ No newline at end of file