The goto query parameter is actually decoded twice, and this messes with the original value if the goto url contains encoded query parameters itself. As a result the goto url might possibly not be valid according to the AM validation service cause it will contain decoded query parameters, while they still should be encoded.
Getting a query param value from URLSearchParams already returns a parsed and decoded value.
https://github.com/ForgeRock/platform-ui/blob/master/packages/platform-login/src/main.js#L82
And afterwards the value is decoded again.
https://github.com/ForgeRock/platform-ui/blob/master/packages/platform-login/src/main.js#L109C55-L109C61
The goto query parameter is actually decoded twice, and this messes with the original value if the goto url contains encoded query parameters itself. As a result the goto url might possibly not be valid according to the AM validation service cause it will contain decoded query parameters, while they still should be encoded.
Getting a query param value from URLSearchParams already returns a parsed and decoded value.
https://github.com/ForgeRock/platform-ui/blob/master/packages/platform-login/src/main.js#L82
And afterwards the value is decoded again.
https://github.com/ForgeRock/platform-ui/blob/master/packages/platform-login/src/main.js#L109C55-L109C61