Developer Jun 22, 2026

URL Encoding Context: Why a URL Inside Another URL, in HTML, and in a Shell Command All Need Different Treatment

A URL that works in a browser can fail in curl, JSON, or as a query parameter — because each context has different rules about which characters need encoding. Here's why "just URL-encode it" is underspecified without knowing the context, the encoding-within-encoding problem (a URL as a value inside another URL), why & needs HTML entity encoding in href attributes but not JSON, and the + vs %20 space ambiguity.

Developer Jun 13, 2026

URL Design as API Design: REST Conventions, Versioning Strategies, and the Long-Term Cost of Changing URLs

REST URL conventions, API versioning strategies (URL path vs header vs date-based like Stripe), trailing slash canonicalization, URL length limits, and the link rot problem — URL design decisions made at launch determine API maintainability for years.

Developer Jun 9, 2026

URL Structure: Query String Parsing Ambiguities, Punycode, and Open Redirect Vulnerabilities

A URL has five components — and bugs come from confusing which part you're encoding. Here's query string parsing ambiguities between frameworks, IDN Punycode for international domains, URL normalisation for comparison, open redirect vulnerabilities, and relative URL resolution edge cases.

Developer Jun 8, 2026

URL Encoding Edge Cases That Break Real Applications

The difference between encoding a full URL and a URL component, why + and %20 aren't always interchangeable, how double-encoding silently corrupts data, and the characters that break most URL handling code.

Developer Jun 6, 2026

URL Encoder/Decoder — Percent-Encode & Decode URLs Instantly

Learn why URL encoding exists, how percent-encoding works, the difference between %20 and + for spaces, and how to encode and decode URLs correctly for APIs and query strings.