httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 42610] New: - mod_rewrite and mod_proxy handle ';' incorrectly
Date Wed, 06 Jun 2007 23:50:02 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=42610>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=42610

           Summary: mod_rewrite and mod_proxy handle ';' incorrectly
           Product: Apache httpd-2
           Version: 2.3-HEAD
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P2
         Component: mod_rewrite
        AssignedTo: bugs@httpd.apache.org
        ReportedBy: jay.mccarthy@gmail.com


The rule:

RedirectMatch ^/(.*) http://host/$1 [P]

a request to

"/foo;bar"

makes a request to

"http://host/foo%3bbar"

rather than

"http://host/foo;bar"

This is an error.

RFC 2616: http://www.w3.org/Protocols/rfc2616/rfc2616-sec3.html#sec3.2.2

 Characters other than those in the "reserved" and "unsafe" sets (see RFC 2396 [42]) are equivalent
to 
their ""%" HEX HEX" encoding.

RFC 2396: http://www.faqs.org/rfcs/rfc2396.html
 Sec 2.2:

  reserved    = ";" | "/" | "?" | ":" | "@" | "&" | "=" | "+" |
                    "$" | ","

Thus ";" is a reserverd character and NOT equivalent to its HEX encoding.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message