An alternate fix would be to use URL-safe base64url encoding variant ie simply replace encoded + and / by - and _ in utils.js in b64EncodeUnicode / b64DecodeUnicode like in urlsafe-base64.js.
Doing so would even be backwards-compatible with existing (already broken) URLs.
Right now this fix may be incomplete as it does not handle the / case, which could break URL parsing.
An alternate fix would be to use URL-safe
base64url
encoding variant ie simply replace encoded+
and/
by-
and_
inutils.js
inb64EncodeUnicode
/b64DecodeUnicode
like in urlsafe-base64.js.Doing so would even be backwards-compatible with existing (already broken) URLs.
Right now this fix may be incomplete as it does not handle the
/
case, which could break URL parsing.