percent-encoding

Percent-encoding, also known as URL encoding, is a mechanism for encoding special characters in URLs. On Windows, percent-encoding plays a role in security zoning through the MapUrlToZone API, which classifies URLs into security zones. Improper handling of percent-encoded characters can lead to path equivalence issues, potentially allowing attackers to bypass security zones and make remote resources appear as trusted local resources. This topic covers how Windows resolves percent-encoded paths and the security implications of these resolutions, particularly in legacy components like Internet Explorer. Understanding percent-encoding is important for Windows security, as it affects how URLs are interpreted and zoned by the system.