Menu

#4 Improper parsing of CGI query string

open
nobody
None
5
2001-02-27
2001-02-27
No

Thanks to Marc Mosko.

The current (1.2) parser in HttpCGIRequestImpl.java
does not
handle "/" characters in a CGI query string. It
considers them token
separators (like the &). The token delimiter should
be removed when
the parsing gets to the query string so the "cgi"
variable will be set
to whatever is remaining in the line.

It would also be nice to be able to pass relative path
information
to an aglet (e.g.
http://aglet:4434/default/aglet/mine/relative/path\),
but that's a bigger change.

Marc

farpoint.tear.com% diff HttpCGIRequestImpl.java
HttpCGIRequestImpl.orig
264,265c264
< // Marc M - change delimiter
to "" to get to EOL
< cgi = t.nextToken("");
---
> cgi = t.nextToken();

Discussion


Log in to post a comment.