Reproduce

When you pass an OWTF target containing especial URL characters such as "?" on the file browser (i.e. "Browse Files" button) on any plugin, this fails to load because these characters are not urlencoded, hence the browser interprets them and OWTF fails to open the relevant directory.

Fix

Calling the relevant url encoding function will fix this problem, for example using encodeURIComponent from JavaScript.

or

calling escape from Tornado template methods