Consider using Uri.EscapeDataString() instead of Uri.EscapeUriString() CS-S1009

The Uri.EscapeUriString() method converts a URI string into its escaped representation. However, this API is obsolete as it can corrupt URIs in some cases. The safer alternative is Uri.EscapeDataString().

Bad Practice

var escaped = Uri.EscapeUriString(uri);

Recommended

var escaped = Uri.EscapeDataString(uri);

Reference

• A08:2021: Software and Data Integrity Failures
• CWE-502: Deserialization of untrusted data
• Uri.EscapeUriString
• Uri.EscapeDataString