You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2007/09/19 04:50:35 UTC

DO NOT REPLY [Bug 41441] - Error 20024 on all pages request containing a ":"

DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG�
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=41441>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND�
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=41441





------- Additional Comments From Tom.Donovan@acm.org  2007-09-18 19:50 -------
While device names could be a small problem, the more treacherous problem is
NTFS data streams - as described in http://support.microsoft.com/kb/105763

These are prone to misuse.

Apache 2.2 (actually the APR test_safe_name() function) intentionally disallows
the ":" character within a URI on Windows. 

Also, the Windows FindFirstFile() function will return ERROR_INVALID_NAME
instead of ERROR_FILE_NOT_FOUND for any name attempting data stream access using
the ":" character.

The choice of the ":" character as the namespace separator in MediaWiki was an
unfortunate one for use on Windows.

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org