From 2c185063f6ce827b159e1e676ae56d7d1a43fb04 Mon Sep 17 00:00:00 2001
From: dinesh <midoriya54378@gmail.com>
Date: Sun, 24 May 2026 09:34:27 +0530
Subject: [PATCH] fix: encode dynamic URL parameters in NFC payload generation

---
 apps/backend/src/routes/nfc.ts | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/apps/backend/src/routes/nfc.ts b/apps/backend/src/routes/nfc.ts
index 03393ba9..97635d91 100644
--- a/apps/backend/src/routes/nfc.ts
+++ b/apps/backend/src/routes/nfc.ts
@@ -84,10 +84,10 @@ export async function nfcRoutes(app: FastifyInstance) {
         }
       }
 
-      const payloadUrl = `https://dev-card.vercel.app/${username}${
-        cardId ? `?card=${cardId}` : ''
-      }`;
-
+const safeUsername = encodeURIComponent(username);
+const payloadUrl = `https://dev-card.vercel.app/${safeUsername}${
+  cardId ? `?card=${encodeURIComponent(cardId)}` : ''
+}`;
       const response: NfcPayloadResponse = {
         type: 'URI',
         payload: payloadUrl,