[CXF-6849] Form parameter names including '%' are not decoded properly

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Cannot Reproduce
• Affects Version/s: 3.1.6
• Fix Version/s: Invalid
• Estimated Complexity: Unknown
• Assignee: Unassigned
• Reporter: Michael Schilling
• Created: 29/Mar/16 18:59
• Updated: 31/Mar/17 19:37
• Resolved: 28/Mar/17 16:17

Description

Making a POST call that has form parameter name of %25 produces a BufferUnderflowException.

Additionally, making a POST call with a form parameter name of %25 directly followed by any character that can't represent a hexadecimal value will produce a RuntimeException stating "Invalid URL encoding: not a valid digit (radix 16): <byte value>".

The source of these exceptions are from UrlUtils#urlDecode and UrlUtils#digit16.

Note: %25 is the URL encoded version of %. The HTTP request send has a desired form parameter of %.