[htdig] Bug in parsing allow_in_form (htdig-3.1.5 and perhaps 3.1.6 ...)

[Berthold C. <co...@rr...>]

Hello!

The htdig configuration parser seems to have a bug at least in version 
3.1.5:

We use SSI templates with htdig. In our environment I need to set 
script_name in allow_in_form. This works fine as long as I don't make 
the mistake to include script_name twice in allow_in_form. x-(

If this happens, the value of script_name is multiplied with each page 
of a set of results I call in my browser. This works for the first an 
the second page of a set. But I'm unable to call a third page.

If the content of script_name in my search form is 
'/search/results.shtml', script_name and CGI show the value 
'/search/results.shtml<some control character>/search/results.shtml' on 
the second page. Therefor the next call of additional results leads to a 
'page not found' message from the webserver.

I suppose that there is a kind of test needed to avoid this behavior of 
allow_in_form.

I don't know whether newer versions are affected or not.


Berthold