TYPO3 Core

I have found the error in typo3/sysext/backend/Classes/Tree/Pagetree/ExtdirectTreeCommands.php

        /**
     * Returns the view link of a given node
     *
     * @param stdClass $nodeData
     * @return string
     */
    static public function getViewLink($nodeData) {
        /** @var $node \TYPO3\CMS\Backend\Tree\Pagetree\PagetreeNode */
        $node = GeneralUtility::makeInstance(\TYPO3\CMS\Backend\Tree\Pagetree\PagetreeNode::class, (array)$nodeData);
        $javascriptLink = stripslashes(BackendUtility::viewOnClick($node->getId()));
        preg_match('/window\\.open\\(\'([^\']+)\'/i', str_replace('u0026','&',$javascriptLink), $match);
        return $match[1];
    }

The error is that the & in URL will be replaced by \u0026 but the pregmatch will be kill that and the url is only a long string :(

Basically the origin of this is in #66706 and the previous changed in that regard...
Encoding JavaScript data and then removing only slashes to circumvent double encodings is unfortunately not enough as it has been done in the mentioned change.