A round of finding url = `...${param}...`; and replacing direct use of ${param} with ${encodeURIComponent(param)}
A round of finding
url =
...${param}...;and replacing direct use of ${param} with ${encodeURIComponent(param)}