httpd-bugs mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject [Bug 59688] New: Path normalization: dot segments with extra slashes resolves to unexpected path
Date Thu, 09 Jun 2016 23:20:13 GMT
https://bz.apache.org/bugzilla/show_bug.cgi?id=59688

            Bug ID: 59688
           Summary: Path normalization: dot segments with extra slashes
                    resolves to unexpected path
           Product: Apache httpd-2
           Version: 2.4.20
          Hardware: PC
                OS: All
            Status: NEW
          Severity: trivial
          Priority: P2
         Component: Core
          Assignee: bugs@httpd.apache.org
          Reporter: dvdckl@gmail.com

Apache httpd resolves paths with extra slashes and dot segments differently
than other HTTP servers and clients. It looks like it's collapsing redundant
slashes *after* it resolves relative path segments instead of before.

Program               Input       Resolved to
--------------------- ----------  -----------
Apache httpd          /foo///../  /foo/
NGINX                 /foo///../  /
Tomcat getServletPath /foo///../  /
Node Path.normalize   /foo///../  /
Windows filesystem    /foo///../  /
Linux filesystem      /foo///../  /
Akamai                /foo///../  /foo/../
Chrome                /foo///../  /foo//
Firefox               /foo///../  /foo//
Edge                  /foo///../  /foo//

RFC 3986 doesn't specifically address duplicate slashes, so I'm unclear on what
the correct behavior is.
https://bz.apache.org/bugzilla/show_bug.cgi?id=49396 is somewhat be related.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


Mime
View raw message