Escape string when converting to regexp (vercel#31791)

fixes vercel#31411

## Bug

- [x] Related issues linked using `fixes #number`
- [x] Integration tests added
- [ ] Errors have helpful link attached, see `contributing.md`


Co-authored-by: JJ Kasper <[email protected]>

Author: ntkoopman

packages/next/shared/lib/router/utils/prepare-destination.ts

@@ -4,6 +4,7 @@ import type { NextParsedUrlQuery } from '../../../../server/request-meta'
 import type { Params } from '../../../../server/router'
 import type { RouteHas } from '../../../../lib/load-custom-routes'
 import { compile, pathToRegexp } from 'next/dist/compiled/path-to-regexp'
+import escapeStringRegexp from 'next/dist/compiled/escape-string-regexp'
 import { parseUrl } from './parse-url'
 
 export function matchHas(
@@ -240,7 +241,7 @@ function getSafeParamName(paramName: string) {
 
 function escapeSegment(str: string, segmentName: string) {
   return str.replace(
-    new RegExp(`:${segmentName}`, 'g'),
+    new RegExp(`:${escapeStringRegexp(segmentName)}`, 'g'),
     `__ESC_COLON_${segmentName}`
   )
 }

test/integration/route-index/test/index.test.js

@@ -32,6 +32,19 @@ const runTests = () => {
     expect(res.status).toBe(404)
     expect(await res.text()).toContain('page could not be found')
   })
+
+  it('should handle /index/?bar%60%3C%25%22%27%7B%24%2A%25%5C correctly', async () => {
+    const res = await fetchViaHTTP(
+      appPort,
+      '/index/?bar%60%3C%25%22%27%7B%24%2A%25%5C'
+    )
+    expect(res.status).toBe(200)
+  })
+
+  it('should handle /index?file%3A%5C correctly', async () => {
+    const res = await fetchViaHTTP(appPort, '/index?file%3A%5C')
+    expect(res.status).toBe(200)
+  })
 }
 
 describe('Route index handling', () => {