Ticket #1636 (new defect)

Opened 3 months ago

lighttpd-1.4.18-1 (on F-7) does not escape %% to %.

Reported by: Michael Stone <michael@laptop.org> Assigned to: jan
Priority: normal Milestone: 1.5.0
Component: core Version: 1.4.18
Severity: normal Keywords:
Cc: Blocking:
Need Feedback: 0

Description

The broken logic is at http://trac.lighttpd.net/trac/browser/branches/lighttpd-1.4.x/src/mod_rewrite.c#L388

This bug makes it impossible to perform URL escaping via mod_rewrite since there's no way to generate the % characters.

To reproduce, write a rewrite-rule that attempts to convert

'/\+' => '/%%2B'

and use 'curl -I SERVER/+' or similar to generate a request. Then examine your error logs.

Attachments

Add/Change #1636 (lighttpd-1.4.18-1 (on F-7) does not escape %% to %.)




Change Properties