You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by Pieter Vanmeerbeek <pi...@able.be> on 2006/06/30 12:28:12 UTC
[users@httpd] URL escape bug : % and %25 ?
Hi,
I recently upgraded to apache 2.2.2 from 2.0.53.
Before this upgrade I had a special trick to solve the owa url escaping
problem (it does not escape an url as it should, see RFC). The trick was to
unescape the url and re-escape it again using apache reverse proxy. This was
achieved by the unescape and escape maps. This worked fine in 2.0.53.
In 2.2.2 however for some reason after the re-escaping was done, each % sign
is escaped to %25 before it is sent to the server on the lan. The rewrite
logs (loglevel 9) shows a correctly escaped url which is sent to the server
on the lan. A tcpdump however shows the extra encoding of each % sign.
Disabling the escape and unescape maps in the config stops this weird
behavior, but still sends incorrectly escaped urls through to the owa (due
to erroneous escaping of the owa itself) so this is not a solution.
This seems like a bug to me. Can anyone confirm this behavior and possible
solve this?
This is shown in the rewrite log:
map lookup OK: map=unescape key=/exchange/pv/Postvak IN/ ->
val=/exchange/pv/Postvak IN/
map lookup OK: map=escape key=/exchange/pv/Postvak IN/ ->
val=/exchange/pv/Postvak%20IN/
...
forcing proxy-throughput with
http://xx.xx.xx.xx:80/exchange/pv/Postvak%20IN/
go-ahead with proxy request
proxy:http://xx.xx.xx.xx:80/exchange/pv/Postvak%20IN/ [OK]
This is shown in the tcpdump :
PROPFIND /exchange/pv/Postvak%2520IN/ HTTP/1.1
Kind regards,
Pieter
--
---------------------------------------------------
Able: 1996-2006: already 10 safe years in YOUR company!
aXs GUARD has completed security and anti-virus checks on this e-mail (http://www.axsguard.com)
---------------------------------------------------
Able NV: ond.nr 0457.938.087
RPR Mechelen
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] URL escape bug : % and %25 ?
Posted by Robert Ionescu <ro...@googlemail.com>.
Pieter Vanmeerbeek wrote:
> Hi,
>
> I recently upgraded to apache 2.2.2 from 2.0.53.
[...]
> In 2.2.2 however for some reason after the re-escaping was done, each % sign
> is escaped to %25 before it is sent to the server on the lan. The rewrite
> logs (loglevel 9) shows a correctly escaped url which is sent to the server
> on the lan. A tcpdump however shows the extra encoding of each % sign.
>
> Disabling the escape and unescape maps in the config stops this weird
> behavior, but still sends incorrectly escaped urls through to the owa (due
> to erroneous escaping of the owa itself) so this is not a solution.
[...]
> forcing proxy-throughput with
> http://xx.xx.xx.xx:80/exchange/pv/Postvak%20IN/
> go-ahead with proxy request
> proxy:http://xx.xx.xx.xx:80/exchange/pv/Postvak%20IN/ [OK]
>
>
> This is shown in the tcpdump :
>
> PROPFIND /exchange/pv/Postvak%2520IN/ HTTP/1.1
Your problem might result from a change in the proxy module, see
http://issues.apache.org/bugzilla/show_bug.cgi?id=39746
May be you should reply there to confirm this bug/regression.
--
Robert
--
Robert
---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org