fix: use %20 instead of + for spaces in Bilibili WBI signed requests (#126)

chencheng-li · claude · web-flow · commit 4cabca12dfa6 · 2026-03-20T16:07:46.000+08:00
URLSearchParams.toString() encodes spaces as +, but Bilibili's WBI signature verification expects %20. This mismatch causes search queries with spaces (e.g. "亚马逊 滞销产品") to fail with TypeError: Failed to fetch due to CORS-blocked error responses. Fixes #125 Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
diff --git a/src/bilibili.ts b/src/bilibili.ts
@@ -60,7 +60,9 @@ export async function wbiSign(
   for (const key of Object.keys(allParams).sort()) {
     sorted[key] = String(allParams[key]).replace(/[!'()*]/g, '');
   }
-  const query = new URLSearchParams(sorted).toString();
+  // Bilibili WBI verification expects %20 for spaces, not + (URLSearchParams default).
+  // Using + causes signature mismatch → CORS-blocked error response → TypeError: Failed to fetch.
+  const query = new URLSearchParams(sorted).toString().replace(/\+/g, '%20');
   const wRid = await md5(query + mixinKey);
   sorted.w_rid = wRid;
   return sorted;
@@ -78,7 +80,7 @@ export async function apiGet(
   }
   const qs = new URLSearchParams(
     Object.fromEntries(Object.entries(params).map(([k, v]) => [k, String(v)])),
-  );
+  ).toString().replace(/\+/g, '%20');
   const url = `${baseUrl}${path}?${qs}`;
   return fetchJson(page, url);
 }

Original file line number	Diff line number	Diff line change
`@@ -60,7 +60,9 @@ export async function wbiSign(`
`60`	`60`	`for (const key of Object.keys(allParams).sort()) {`
`61`	`61`	`sorted[key] = String(allParams[key]).replace(/[!'()*]/g, '');`
`62`	`62`	`}`
`63`		`- const query = new URLSearchParams(sorted).toString();`
	`63`	`+ // Bilibili WBI verification expects %20 for spaces, not + (URLSearchParams default).`
	`64`	`+ // Using + causes signature mismatch → CORS-blocked error response → TypeError: Failed to fetch.`
	`65`	`+ const query = new URLSearchParams(sorted).toString().replace(/\+/g, '%20');`
`64`	`66`	`const wRid = await md5(query + mixinKey);`
`65`	`67`	`sorted.w_rid = wRid;`
`66`	`68`	`return sorted;`
`@@ -78,7 +80,7 @@ export async function apiGet(`
`78`	`80`	`}`
`79`	`81`	`const qs = new URLSearchParams(`
`80`	`82`	`Object.fromEntries(Object.entries(params).map(([k, v]) => [k, String(v)])),`
`81`		`- );`
	`83`	`+ ).toString().replace(/\+/g, '%20');`
`82`	`84`	const url = `${baseUrl}${path}?${qs}`;
`83`	`85`	`return fetchJson(page, url);`
`84`	`86`	`}`