From 64836d6e1ed280cdd651522197485a2cf3da549f Mon Sep 17 00:00:00 2001
From: mihretue <mihretuendeshaw84@gmail.com>
Date: Tue, 1 Sep 2026 15:18:13 +0300
Subject: [PATCH] fix: sanitize applicationId and documentId parameters in
 PaymentCheckPage

---
 .../src/app/features/payments/pages/PaymentCheckPage.tsx      | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/apps/portal/src/app/features/payments/pages/PaymentCheckPage.tsx b/apps/portal/src/app/features/payments/pages/PaymentCheckPage.tsx
index e4f302255..fd6d2c7a1 100644
--- a/apps/portal/src/app/features/payments/pages/PaymentCheckPage.tsx
+++ b/apps/portal/src/app/features/payments/pages/PaymentCheckPage.tsx
@@ -34,9 +34,9 @@ export function PaymentCheckPage() {
   const { t } = useTranslation();
   const [params] = useSearchParams();
   const navigate = useNavigate();
-  const applicationId = params.get('applicationId') ?? '';
+  const applicationId = (params.get('applicationId') ?? '').split('?')[0];
   // Seaman Book / BTC fees come back with `documentId` instead.
-  const documentId = params.get('documentId') ?? '';
+  const documentId = (params.get('documentId') ?? '').split('?')[0];
   const [attempts, setAttempts] = useState(0);
 
   const applicationPayment = useGetApplicationPaymentQuery(applicationId, {