From bdbe290804963c87f9093aecb61bfc190ea0eb8e Mon Sep 17 00:00:00 2001
From: Petar Todorovic <petar@omni.app>
Date: Mon, 28 Apr 2025 13:03:40 +0200
Subject: [PATCH] feat(initQueryParams): whitelist `+` in query params

---
 .changeset/rare-pants-occur.md                     | 5 +++++
 packages/widget/src/hooks/use-init-query-params.ts | 2 +-
 2 files changed, 6 insertions(+), 1 deletion(-)
 create mode 100644 .changeset/rare-pants-occur.md

diff --git a/.changeset/rare-pants-occur.md b/.changeset/rare-pants-occur.md
new file mode 100644
index 00000000..374dfcd2
--- /dev/null
+++ b/.changeset/rare-pants-occur.md
@@ -0,0 +1,5 @@
+---
+"@stakekit/widget": patch
+---
+
+feat(initQueryParams): whitelist `+` in query params
diff --git a/packages/widget/src/hooks/use-init-query-params.ts b/packages/widget/src/hooks/use-init-query-params.ts
index 539118fa..6a1f764b 100644
--- a/packages/widget/src/hooks/use-init-query-params.ts
+++ b/packages/widget/src/hooks/use-init-query-params.ts
@@ -41,7 +41,7 @@ const skSupportedChainsCodec = Codec.custom<SupportedSKChains>({
   encode: (val) => val,
 });
 
-const safeString = /^(?!.*\.\.)[a-zA-Z0-9-_.]*$/;
+const safeString = /^(?!.*\.\.)[a-zA-Z0-9-_.+]*$/;
 
 const safeParamCodec = Codec.custom<string>({
   decode: (val) =>