[WICKET-40] Parameters of nice URL's pages with 'sensitive' characters

• Type: Bug
• Status: Resolved
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.2.3
• Fix Version/s: 1.3.0-beta2
• Component/s: wicket
• Assignee: Jean-Baptiste Quenot
• Reporter: Jan Bareš
• Created: 10/Nov/06 09:46
• Updated: 10/Jun/07 16:20
• Resolved: 06/May/07 20:01

Description

Wicket uses HttpServletRequest.getPathInfo() to get the the URL. The returned string is already URL decoded, so when the request parameter pair contains %2F, it will be returned as '/', so the request pair will be broken (the same applies to other characters like '+' etc). This was cseen with Jetty 6 and Tomcat 5.5.
Wicket should use HttpServletRequest.getRequestURI() or getRequestURL() as this seems to return URL as it was passed to the server.