[jira] [Created] (VALIDATOR-396) Check missing if unwise characters (backslash etc., see rfc2396) are used

["dr0i (JIRA)" <ji...@apache.org>]

dr0i created VALIDATOR-396:
------------------------------

             Summary: Check missing if unwise characters (backslash etc., see rfc2396) are used
                 Key: VALIDATOR-396
                 URL: https://issues.apache.org/jira/browse/VALIDATOR-396
             Project: Commons Validator
          Issue Type: Bug
          Components: Routines
    Affects Versions: 1.5.0
         Environment: all
            Reporter: dr0i


From the rfc2396:
"
   Other characters are excluded because gateways and other transport
   agents are known to sometimes modify such characters, or they are
   used as delimiters.

   unwise      = "{" | "}" | "|" | "\" | "^" | "[" | "]" | "`"

   Data corresponding to excluded characters must be escaped in order to
   be properly represented within a URI.
"

The URLValidator doesn't check if an "unwise" character is used as unescaped char and subsequently reports a URL as valid if it has an unwise character in it. There are some applications out there which break eating such a URL.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)