This is an encryption pattern for URLs that are stamped in the inline scripts of Stream rules

EncryptionPattern2.jsp

<%tools.putSaveValue("CAPTION-Task", tools.getLocalizedTextForString("pxRequestor.pyCaption","Task")); 
tools.putSaveValue("CAPTION-WaitingAt", tools.getLocalizedTextForString("pxRequestor.pyCaption","WaitingAt")); 
 %>
  /* Original */
<script>
function displayFlowLocation(asnKey)
  {
      strURL = strRequestorURIformFlows + "?pyActivity=Work-.GetLocationForAssignment&InsHandle=" + escape(asnKey);
      openUrlInWindow(strURL,"FlowLocation","status=yes,toolbar=no,menubar=no,location=no,scrollbars=yes,resizable=yes,left=20,top=20,height=600,width=750");
  }
</script>

/* Encrypted . Notice how the static part of the url is only encrypted. 
   The dynamic js variables can still be passed by appending to encrypted url in query string format*/
<script>
function displayFlowLocation(asnKey)
  {
      strURL = strRequestorURIformFlows + "?<%=pega_rules_utilities.pzEncryptURLActionString(tools, "Thread","pyActivity=Work-.GetLocationForAssignment")%>&InsHandle=" + escape(asnKey);
      openUrlInWindow(strURL,"FlowLocation","status=yes,toolbar=no,menubar=no,location=no,scrollbars=yes,resizable=yes,left=20,top=20,height=600,width=750");
  }
</script>