You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@shindig.apache.org by "Chris Chabot (JIRA)" <ji...@apache.org> on 2008/05/16 02:06:55 UTC

[jira] Resolved: (SHINDIG-271) Unecessary urldecode prevent proxyed data to be read

     [ https://issues.apache.org/jira/browse/SHINDIG-271?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Chris Chabot resolved SHINDIG-271.
----------------------------------

    Resolution: Fixed
      Assignee: Chris Chabot

Thanks for the report!

Fixed and commited:
http://svn.apache.org/viewvc/incubator/shindig/trunk/php/src/gadgets/http/ProxyServlet.php?rev=656901&r1=656900&r2=656901&view=diff



> Unecessary urldecode prevent proxyed data to be read
> ----------------------------------------------------
>
>                 Key: SHINDIG-271
>                 URL: https://issues.apache.org/jira/browse/SHINDIG-271
>             Project: Shindig
>          Issue Type: Bug
>          Components: Gadget Rendering Server (PHP)
>         Environment: PHP 5.2.5 / Linux Ubuntu 7.10
>            Reporter: fhodierne
>            Assignee: Chris Chabot
>   Original Estimate: 0.25h
>  Remaining Estimate: 0.25h
>
> In ProxyServlet.php, the $url = urldecode($url) is unnecessary and prevent data to be read in js after.
> The problem can reproduced with url of kind:
> http://example.com/feed?url=http%3A%2F%2Ffeeds.feedburner.com%2FDilbertDailyStrip
> Which produce:
> throw 1; < don't be evil' >{"http:\/\/example.com\/feed?url=http:\/\/feeds.feedburner.com\/DilbertDailyStrip":{"body":
> Instead of:
> throw 1; < don't be evil' >{"http:\/\/example.com\/feed?url=http%3A%2F%2Ffeeds.feedburner.com%2FDilbertDailyStrip":{"body":
> As a result, in io.js after, data[url] do not exists because key is wrong.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.