    public void urlEncodedValues() {
        final String ticket = "ST-1-owKEOtYJjg77iHcCQpkl-cas01.example.org%26%73%65%72%76%69%63%65%3d%68%74%74%70%25%33%41%25%32%46%25%32%46%31%32%37%2e%30%2e%30%2e%31%25%32%46%62%6f%72%69%6e%67%25%32%46%23";
        final String service = "foobar";
        final String url = this.ticketValidator.constructValidationUrl(ticket, service);

        final String encodedValue = this.ticketValidator.encodeUrl(ticket);
        assertTrue(url.contains(encodedValue));
        assertFalse(url.contains(ticket));
    }
The software constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.