New devices API uses call arguments that are prohibited in qrexec calls

[marmarek]

Qubes OS release

Qubes OS 4.3

Brief summary

New device API uses * and : in Admin API call arguments. It works in dom0 as it isn't going through qrexec, but breaks in GUI domain

Steps to reproduce

1. Try to use devices API (qvm-usb for example) in GUI domain
2. Observe what calls are being made

Expected behavior

Call arguments are following qrexec restrictions

Actual behavior

Some calls are using prohibited characters, for examples:

• admin.vm.device.usb.Attach+sys-usb+4.3:0123:4567::uffffff
• admin.vm.device.usb.Detach+sys-usb+4.3:*

Additional information

No response