[5.x]: Google Authenticator shows html encoded characters for 2FA

[lineke]

What happened?

Description

When setting up the 2FA for the control panel in Craft 5 with Google Authenticator, the title that is shown after scanning the QR code has %20 and %40 in it, instead of a space or a @-sign.

Steps to reproduce

1. Enable 2FA for the control panel
2. With a new user, scan the QR code in Google Authenticator
3. Check the title shown in Google Authenticator

Expected behavior

The title in Google Authenticator should not show %20 and %40

Actual behavior

Craft CMS version

5.5.10

PHP version

8.2

Operating system and version

No response

Database type and version

Mysql

Image driver and version

No response

Installed plugins and versions

[i-just]

Hi, thanks for reaching out! I’m not able to reproduce that. What’s the version of the Google Authenticator app you’re using?

[lineke]

@i-just I use the latest version 4.2.1. I asked this question first with Craft Support via email and Tommy Silver responded that he could reproduce it.

[i-just]

Ah, you’re on an iPhone, right?

[lineke]

@i-just Yes, that is correct. I should have put that in the ticket as well, sorry about that.

[Romanavr]

Relevant for me too

[brandonkelly]

Craft 5.6.2 is out with that fix. Thanks all!

[lineke]

Thank you, just in time before the users will be adding the new 2FA during our migration. We will be testing this soon!