[jira] Commented: (WICKET-40) Parameters of nice URL's pages with 'sensitive' characters

["Jean-Baptiste Quenot (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/WICKET-40?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12492222 ] 

Jean-Baptiste Quenot commented on WICKET-40:
--------------------------------------------

I also tested this patch successfully with:

* "/wicket-examples" servlet context path and /* servlet mapping
* "/wicket-examples" servlet context path and /* filter mapping
* "" servlet context path and /* servlet mapping
* "" servlet context path and /* filter mapping
* "" servlet context path and /helloservlet/* servlet mapping
* "" servlet context path and /helloworld/* filter mapping

> Parameters of nice URL's pages with 'sensitive' characters
> ----------------------------------------------------------
>
>                 Key: WICKET-40
>                 URL: https://issues.apache.org/jira/browse/WICKET-40
>             Project: Wicket
>          Issue Type: Bug
>          Components: wicket
>    Affects Versions: 1.2.3
>            Reporter: Jan Bareš
>         Assigned To: Alastair Maw
>         Attachments: 20070427-WICKET-40-WicketFilter-no-decoding.txt
>
>
> Wicket uses HttpServletRequest.getPathInfo() to get the the URL. The returned string is already URL decoded, so when the request parameter pair contains %2F, it will be returned as '/', so the request pair will be broken (the same applies to other characters like '+' etc). This was cseen with Jetty 6 and Tomcat 5.5.
> Wicket should use HttpServletRequest.getRequestURI() or getRequestURL() as this seems to return URL as it was passed to the server.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.