Ticket #3466 (assigned defect)

Opened 2 years ago

Last modified 1 year ago

Screwed up POST data parsing

Reported by: Chris Graham <chris@ocportal.com> Assigned to: weyrick (accepted)
Priority: urgent Milestone: 3.0.0 release
Component: Build System Version: trunk
Severity: major Keywords:
Cc:

Description

This one's really nasty. If you POST in an multipart/form-data form, and this form contains a value that is a URL, then the URL will be cut up at the point of the first ampersand, and subsequent parameter segments are absorbed into the top-level POST request.

i.e. If I passed in... <input type="hidden" name="url" value="http://example/foo?a=1&b=1"> then I'd get url=http://example/foo?a=1 b=1 ...

Change History

04/15/07 08:58:26 changed by weyrick

  • version changed from 2.1.0 beta to 2.9.0 beta.
  • component changed from Runtime to Build System.
  • severity changed from block to major.
  • milestone set to 2.9.x beta.

12/21/07 10:15:36 changed by weyrick

  • owner changed from anonymous to weyrick.
  • status changed from new to assigned.