You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by michael-o <gi...@git.apache.org> on 2018/07/20 12:40:21 UTC

[GitHub] tomcat pull request #:

Github user michael-o commented on the pull request:

    https://github.com/apache/tomcat/commit/eb195bebac8239b994fa921aeedb136a93e4ccaf#commitcomment-29778594
  
    In java/org/apache/catalina/core/ApplicationContext.java:
    In java/org/apache/catalina/core/ApplicationContext.java on line 419:
    @markt-asf Just stumbled upon this in our code with the target path for `forward`: `/WEB-INF/fo00_1385+0.jsp`. `URLDecoder` is the wrong class to use in several spots if your grep for. Javadoc says:
    
    bq. Utility class for HTML form decoding. This class contains static methods for decoding a String from the `application/x-www-form-urlencoded` MIME format. This is *not* URI encoding. 
    
    What happens in my case is that from `/WEB-INF/fo00_1385+0.jsp` `/WEB-INF/fo00_1385 0.jsp` arrives at the end. This looks plain wrong to me.


---

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org