404 error - URL encoded query string fails to pass correctly if it includes a urlencoded forward slash

[securit]

• Laravel Version: 8.18.1
• PHP Version: 7.4.13
• Database Driver & Version: PGSQL v13 on Laravel Forge

Description:

An HTTP Get route that includes a URL encoded string with %2F in the string is incorrectly interpreted as a '/' resulting in a 404 error.

Steps To Reproduce:

In routes/web.php

Route::get('/test/{cryptString}/{crypt2String?}', function ($cryptString,$crypt2String) {
   dump ($cryptString);
   if($crypt2String){
       dump ($crypt2String);
   }
});

Then if your site is local.test... visit the URL https://local.test/ThisShouldAllBe%2FOneString.

Actual Result will be::

^ "ThisShouldAllBe"
^ "OneString"

Expected Result would be:

^ "ThisShouldAllBe%2FOneString"
^ ""

Why is this important?
(a) URL encoding should be safe and not intepret the %2F as a /
(b) Encoded and encrypted data cannot be effectively passed. An example of this is a button that is to be pressed from within a toMail() notification.

$urlOrderString = urlencode(Hash::make($this->order->order_number) . Crypt::encryptString(serialize(['order_id' => $this->order->id, 'team_id' => $notifiable->id])));
$processURL = route('mail.order_fulfilled', $urlOrderString);

...

return (new MailMessage)
            ->subject(Lang::get('New order # :Order_no :From', ['Order_no' => $this->order->order_number, 'From' => $from]))
            ->greeting(Lang::get('New Order Received.'))
//            ->line(Lang::get('Congratulations, a new order has been made! You now need to fulfill and process the order.'))
//            ->action(Lang::get('Process the order'), $process)
            ->markdown('mail.order.placed', array_filter([
                'order'      => $orderData,
                'orderURL'   => $orderURL,
                'processURL' => $processURL,
                'contactURL' => $contactURL,
                'total'      => $orderData->order_lineitems ? $orderData->order_lineitems->sum(function ($item) {
                    return $item["price"] * $item["quantity"];
                }) : null,
            ], 'strlen'));

[driesvints]

See #22125