`Release Actions` input is not sanitized into query option `release_mbid`

[hasezoey]

For a while now i have always wondered why my Tampermonkey script (Enhanced Cover Art) was not working when going via Release Actions instead of first searching in Release lookup and then clicking on the "Musicbrainz entry already exists" button.
Turns out when using a link as a input, Release Actions does not parse and add the actual mbid to the query option, but the full input. Example:

The input to both fields is
https://musicbrainz.org/release/dd094950-5442-4326-9f91-a3acf6a47b6f.

When going via Release Actions, the resulting url is:

https://harmony.pulsewidth.org.uk/release/actions?release_mbid=https%3A%2F%2Fmusicbrainz.org%2Frelease%2Fdd094950-5442-4326-9f91-a3acf6a47b6f

When going via Release Lookup and then clicking on Existing Musicbrainz entry, the resulting url is:

https://harmony.pulsewidth.org.uk/release/actions?release_mbid=dd094950-5442-4326-9f91-a3acf6a47b6f

Guessing by the behavior of Release lookup and the query option name, even though harmony works with either, i think it is intended to be sanitized.

Harmony v2026.3.8

[kellnerd]

I think this should be reported as an issue with the Enhanced Cover Art Uploads userscript.
Harmony sanitizes the release_mbid query parameter input before it uses the MBID, it just doesn't rewrite the URL as there is no reason to do that.

Originally, the query parameter only supported MBIDs but there were too many users pasting or seeding complete URLs that I decided to allow those as well (#100).
Apparently the userscript was never updated to run for those URLs.

[hasezoey]

I think this should be reported as an issue with the Enhanced Cover Art Uploads userscript.

True, though i thought to report it here first as it looks kinda weird that Release lookup does correctly parse and only uses the MBID, whereas the Release actions just pastes the link and only on the page itself parses the mbid.

For example if i paste https://musicbrainz.org/release/dd094950-5442-4326-9f91-a3acf6a47b6f/cover-art it also stays preserved.

Originally, the query parameter only supported MBIDs but there were too many users pasting or seeding complete URLs that I decided to allow those as well (#100).

I also paste whole urls as copied directly from musicbrainz, so this functionality is great. I just thought the parsing should happen earlier than the page itself, if possible or transform the query parameter once it successfully parses.