#1 GET variables broken

[Anonymous]

from paul.winkler@ctimi.com

GET variables seem to be going through some odd
encoding that breaks forms using the GET method.
Punctuation characters are garbled, and newline
characters cause a total failure.

scenario:
apache -> jboss with pstreams -> zope or some other
server

1) create a form with method=GET and action= some
script or page on the third server (the one behind
pstreams).

2) The target page should display request
variables "punctuation" and "other_text".

3) in the form include something like:

Punctuation: <input type="text" name="punctuation"
value="~`!@#$%^&amp;*()_-+={[}]
|\:;'&quot;&lt;,&gt;.?/" />

Other text: <textarea name="other_text"></textarea>

4) Submit the form. Note that the "punctuation" is
displayed as:
nullEnull0null1null0null3null4null5nullEnull6*null8null9_-
nullBnullDnullBnullBnullDnullDnullCnullCnullAnullBnull7null2nul
lCnullCnullE.nullFnullF

All punctuation characters are turned into "nullN"
except . _ - * .

5) Go back to the form and try entering some text
including a newline in the "Other text" textarea.
Submit the form.

6) After a long time, Apache comes back with:

Proxy Error
The proxy server received an invalid response from an
upstream server.
The proxy server could not handle the request
GET /zportal/paul_stuff/test_get_action.
Reason: Error reading from remote server