Artifact names with unicode characters can't be downloaded from CDN results in Error: Forbidden

Summary

Originally reported via this (internal only) ticket. Zip archives containing artifacts for some jobs can't be downloaded and return Error: Forbidden Your client does not have permission to get URL

The combination of these characters ©️job🧪 seem to cause an issue when generating the signed URL

Steps to reproduce

Upload any number of named artifacts using the following naming scheme:

©️<name_here>🧪

Example Project

https://gitlab.com/ulisesf/cdn-emoji-test/-/jobs/3951047136

What is the current bug behavior?

Zipped artifacts can't be downloaded

What is the expected correct behavior?

Zipped artifacts should be able to be downloaded

Relevant logs and/or screenshots

From the redirect to https://cdn.artifacts.gitlab-static.net:

Error: Forbidden

Your client does not have permission to get URL 

Output of checks

This bug happens on GitLab.com /label reproduced on GitLab.com

Results of GitLab environment info

Expand for output related to GitLab environment info

(For installations with omnibus-gitlab package run and paste the output of:
`sudo gitlab-rake gitlab:env:info`)

(For installations from source run and paste the output of:
`sudo -u git -H bundle exec rake gitlab:env:info RAILS_ENV=production`)

Results of GitLab application Check

N/A

Possible fixes