You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@myfaces.apache.org by "dennis hoersch (JIRA)" <de...@myfaces.apache.org> on 2013/05/28 11:20:20 UTC
[jira] [Created] (MYFACES-3731) HTMLEncoder.encodeURIAtributte
re-escapes already percent-encoded string
dennis hoersch created MYFACES-3731:
---------------------------------------
Summary: HTMLEncoder.encodeURIAtributte re-escapes already percent-encoded string
Key: MYFACES-3731
URL: https://issues.apache.org/jira/browse/MYFACES-3731
Project: MyFaces Core
Issue Type: Bug
Affects Versions: 2.1.11
Reporter: dennis hoersch
In HTMLEncoder.encodeURIAtributte is a check to not re-escape already percent-encoded parts. But that code assumes the percent-encoded symbols to be uppercase letters.
So in the following link the '%2b' is escaped to '%252b':
Original:
"http://host/app/?ae=Item&a=Open&t=IPM.Note&id=RgAAAAB4E8INIm43RZNuTeFByn9IBwCfBp1RvH2jT7X5YNYS8KZjAAAApBU%2bAABNyiydsdzWRbj76MCJ9qhxAAAAmaj0AAAJ&exvsurl=1";
Encoded:
"http://host/app/?ae=Item&a=Open&t=IPM.Note&id=RgAAAAB4E8INIm43RZNuTeFByn9IBwCfBp1RvH2jT7X5YNYS8KZjAAAApBU%252bAABNyiydsdzWRbj76MCJ9qhxAAAAmaj0AAAJ&exvsurl=1
(http://tools.ietf.org/html/rfc3986#page-12 says uppercase and lowercase letters have to be considered as equal.)
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira