Skip to content

HMAC Query String should be URL Encoded

Similar to the Register Service, when the request that the Notification Service sends to a Push endpoint can include improperly encodes the hmac query string parameter, which allows raw = in the hmac query string parameter, which in tern can cause subscription creation to fail.