[#WICKET-40] Parameters of nice URL's pages with 'sensitive' characters

Wicket

Parameters of nice URL's pages with 'sensitive' characters

Created: 10/Nov/06 09:46 AM Updated: 10/Jun/07 04:20 PM

Return to search

Component/s:

wicket

Affects Version/s:

1.2.3

Fix Version/s:

1.3.0-beta2

Time Tracking:

Not Specified

File Attachments:

	File Name	Date Attached	Attached By	Size
	20070427-WICKET-40-WicketFilter-no-decoding.txt	2007-04-27 07:57 AM	Jean-Baptiste Quenot	4 kB

Resolution Date:

06/May/07 08:01 PM

Description

« Hide

Wicket uses HttpServletRequest.getPathInfo() to get the the URL. The returned string is already URL decoded, so when the request parameter pair contains %2F, it will be returned as '/', so the request pair will be broken (the same applies to other characters like '+' etc). This was cseen with Jetty 6 and Tomcat 5.5.
Wicket should use HttpServletRequest.getRequestURI() or getRequestURL() as this seems to return URL as it was passed to the server.

All

Comments

Work Log

Change History

Subversion Commits

Sort Order:

Eelco Hillenius made changes - 31/Jan/07 07:57 AM

Field	Original Value	New Value
Assignee		Alastair Maw [ almaw ]

Jean-Baptiste Quenot made changes - 27/Apr/07 07:57 AM

Attachment

20070427-WICKET-40-WicketFilter-no-decoding.txt [ 12356389 ]

Jean-Baptiste Quenot made changes - 27/Apr/07 08:21 AM

Priority

Major [ 3 ]

Critical [ 2 ]

Jean-Baptiste Quenot made changes - 06/May/07 08:01 PM

Resolution		Fixed [ 1 ]
Status	Open [ 1 ]	Resolved [ 5 ]
Assignee	Alastair Maw [ almaw ]	Jean-Baptiste Quenot [ jbq ]
Fix Version/s		1.3 [ 12312114 ]

Jean-Baptiste Quenot made changes - 10/Jun/07 04:20 PM

Fix Version/s	trunk [ 12312514 ]
Fix Version/s		1.3.0-beta2 [ 12312502 ]