fix: encode projectName in browser client URL

packages/browser/src/client/client.ts

@@ -18,7 +18,7 @@ export const RPC_ID: string
 const METHOD = getBrowserState().method
 export const ENTRY_URL: string = `${
   location.protocol === 'https:' ? 'wss:' : 'ws:'
-}//${HOST}/__vitest_browser_api__?type=${PAGE_TYPE}&rpcId=${RPC_ID}&sessionId=${getBrowserState().sessionId}&projectName=${getBrowserState().config.name || ''}&method=${METHOD}&token=${(window as any).VITEST_API_TOKEN || '0'}`
+}//${HOST}/__vitest_browser_api__?type=${PAGE_TYPE}&rpcId=${RPC_ID}&sessionId=${getBrowserState().sessionId}&projectName=${encodeURIComponent(getBrowserState().config.name || '')}&method=${METHOD}&token=${(window as any).VITEST_API_TOKEN || '0'}`
 
 const onCancelCallbacks: ((reason: CancelReason) => void)[] = []
 

test/browser/specs/client-url.test.ts

@@ -0,0 +1,50 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'
+
+describe('Browser Client URL Encoding', () => {
+  beforeEach(() => {
+    vi.resetModules()
+
+    vi.stubGlobal('window', {
+      __vitest_browser_runner__: {
+        type: 'tester',
+        sessionId: 'session-123',
+        testerId: 'tester-456',
+        method: 'run',
+        config: {
+          name: 'Components & Hooks',
+        },
+      },
+      VITEST_API_TOKEN: 'token-789',
+    })
+
+    vi.stubGlobal('location', {
+      protocol: 'http:',
+      hostname: 'localhost',
+      port: '5173',
+    })
+
+    vi.stubGlobal('WebSocket', class MockWebSocket {
+      constructor(public url: string) {}
+      addEventListener() {}
+      send() {}
+      close() {}
+    })
+  })
+
+  afterEach(() => {
+    vi.unstubAllGlobals()
+  })
+
+  it('should encode project name with ampersand in ENTRY_URL', async () => {
+    const { ENTRY_URL } = await import('../../../packages/browser/src/client/client')
+
+    const url = new URL(ENTRY_URL)
+
+    expect(ENTRY_URL).toContain('projectName=Components%20%26%20Hooks')
+
+    expect(url.searchParams.get('projectName')).toBe('Components & Hooks')
+
+    expect(url.searchParams.get('type')).toBe('tester')
+    expect(url.searchParams.get('sessionId')).toBe('session-123')
+  })
+})