Fix network admin notices and double-encoded return URLs

Co-authored-by: dknauss <273554+dknauss@users.noreply.github.com>

Author: Copilot

includes/class-gate.php

@@ -120,9 +120,11 @@ public function register(): void {
 
 		// Fallback admin notice when a gated AJAX/REST request was blocked.
 		add_action( 'admin_notices', array( $this, 'render_blocked_notice' ) );
+		add_action( 'network_admin_notices', array( $this, 'render_blocked_notice' ) );
 
 		// Persistent gate notice on gated pages when no sudo session is active.
 		add_action( 'admin_notices', array( $this, 'render_gate_notice' ) );
+		add_action( 'network_admin_notices', array( $this, 'render_gate_notice' ) );
 
 		// PHP action link filters for server-rendered buttons (plugins list table).
 		add_filter( 'plugin_action_links', array( $this, 'filter_plugin_action_links' ), 50, 2 );
@@ -833,7 +835,8 @@ public function render_blocked_notice(): void {
 
 		$query_args = array( 'page' => 'wp-sudo-challenge' );
 		if ( $current_url ) {
-			$query_args['return_url'] = rawurlencode( $current_url );
+			// add_query_arg() already encodes the URL, so no need for rawurlencode().
+			$query_args['return_url'] = $current_url;
 		}
 
 		$challenge_url = add_query_arg(
@@ -905,7 +908,8 @@ public function render_gate_notice(): void {
 
 		$query_args = array( 'page' => 'wp-sudo-challenge' );
 		if ( $current_url ) {
-			$query_args['return_url'] = rawurlencode( $current_url );
+			// add_query_arg() already encodes the URL, so no need for rawurlencode().
+			$query_args['return_url'] = $current_url;
 		}
 
 		$challenge_url = add_query_arg(

includes/class-plugin.php

@@ -169,7 +169,8 @@ public function enqueue_shortcut(): void {
 		$challenge_url = add_query_arg(
 			array(
 				'page'       => 'wp-sudo-challenge',
-				'return_url' => rawurlencode( $this->get_current_admin_url() ),
+				// add_query_arg() already encodes the URL, so no need for rawurlencode().
+				'return_url' => $this->get_current_admin_url(),
 			),
 			is_network_admin() ? network_admin_url( 'admin.php' ) : admin_url( 'admin.php' )
 		);