last update from odk -Release notes can be found at https://github.com/getodk/central/releases/tag/v2025.2.3

.eslintrc.js

@@ -11,7 +11,8 @@ module.exports = {
     $: 'readonly',
     alert: 'readonly',
     document: 'readonly',
-    window: 'readonly'
+    window: 'readonly',
+    defineModel: 'readonly'
   },
   rules: {
     'arrow-parens': 'off',

e2e-tests/run-tests.sh

@@ -67,7 +67,7 @@ if [[ ${CI-} = true ]]; then
 fi
 
 log "Installing npm packages..."
-npm install
+npm ci
 
 cd e2e-tests
 log "Playwright: $(npx playwright --version)"

e2e-tests/tests/enketo.spec.js

@@ -251,20 +251,21 @@ test.describe('Enketo', () => {
     await expect(frame.getByRole('heading', { name: 'Successful' })).toBeVisible();
   });
 
-  test('default value is consistent between rendering enketo directly or via iframe', async ({ page }) => {
+  test('default value is consistent between rendering enketo directly and via iframe', async ({ page }) => {
     await login(page);
 
     const queryWithSpaces = '?d[/data/first_name]=hello earth + hello mars %20 hello jupiter %2B hello saturn';
 
     await page.goto(`${appUrl}/enketo-passthrough/${publishedForm.enketoId}${queryWithSpaces}`);
     await expect(page.getByRole('heading', { name: publishedForm.name })).toBeVisible();
 
-    const defaultValueInEnketo = await page.getByLabel('First Name').inputValue();
+    await expect(page.getByLabel('First Name')).toHaveValue('hello earth + hello mars   hello jupiter + hello saturn');
 
     await page.goto(`${appUrl}/projects/${projectId}/forms/${publishedForm.xmlFormId}/submissions/new${queryWithSpaces}`);
     const iframe = await page.frameLocator('iframe');
     await expect(iframe.getByRole('heading', { name: publishedForm.name })).toBeVisible();
 
-    await expect(iframe.getByLabel('First Name')).toHaveValue(defaultValueInEnketo);
+    // except we transform + into space as well in iframe
+    await expect(iframe.getByLabel('First Name')).toHaveValue('hello earth   hello mars   hello jupiter + hello saturn');
   });
 });

main.nginx.conf

@@ -46,6 +46,21 @@ http {
     ~^__Host-(session=.+)$ $1;
   }
 
+  map $args $qp_deliminator {
+    ~.+ "&";
+    default "?";
+  }
+
+  map $arg_st $redirect_non_single_prefix {
+    ~.+     "${is_args}${args}${qp_deliminator}single=false";
+    default "/new${is_args}${args}";
+  }
+
+  map $arg_st $redirect_single_prefix {
+    ~.+     "${is_args}${args}";
+    default "/new${is_args}${args}${qp_deliminator}single=true";
+  }
+
   server {
     listen 8686;
     server_name localhost;
@@ -70,7 +85,9 @@ http {
     # Following are the locations that serve a Form and these are redirected to the frontend:
     location ~ "^/-/single/(?<enketoId>[a-zA-Z0-9]+)$" {
       # Form fill link, public
-      return 301 "/f/$enketoId$is_args$args";
+      # If 'st' query parameter is not present, redirect to protected route with single only
+      # end-of-form behavior (/new?single=true)
+      return 301 "/f/$enketoId$redirect_single_prefix";
     }
     location ~ "^/-/preview/(?<enketoId>[a-zA-Z0-9]+)$" {
       # preview link
@@ -81,7 +98,8 @@ http {
     # we don't want them to be redirected to central-frontend
     location ~ "^/-/(?!thanks$|connection$|login$|logout$|api$|preview$)(?<enketoId>[a-zA-Z0-9]+)$" {
       # Form fill link (non-public), or Draft
-      return 301 "/f/$enketoId/new$is_args$args";
+      # If 'st' query parameter is present, add ?single=false for public access
+      return 301 "/f/$enketoId$redirect_non_single_prefix";
     }
     location = /-/single/check-submitted {
         alias ./dist/blank.html;