Re: [PyCS-devel] bug in medusa that creates problems for both pycs and pyds (functionality bug, not security bug!)

[Georg B. <gb...@mu...>]

Hi!

> path, qs = urllib.splitquery(request)
> if '%' in path:
>    request = unquote(path) + qs

Ok, I tried a bit, this is what looks like to work (and is currently used
on muensterland.org to test it):

in the top of http_server.py:

from urlllib  import unquote, splitquery

in the found_terminator method:

rpath, rquery = splitquery(request)
if '%' in rpath:
   if rquery:
      request = unquote(rpath)+'?'+rquery
   else:
      request = unquote(rpath)

Did I miss some problem? Or should this really work?

bye, Georg