[issue24657] CGIHTTPServer module discard continuous '/' letters from params given by GET method.

Xiang Zhang report at bugs.python.org
Thu Sep 24 05:03:06 CEST 2015


Xiang Zhang added the comment:

I think this is a bug. 

According to the rfcs, "/" is a reserved character in query component and continuous "/" in query component may be invalid and how to deal with it depends on the server. But encoded "/", %2F, acts as data and should be preserved. And from rfc3875, QUERY_STRING must be passed encoded.

I tested in apache2.4 with martin's script, query string is:

('QUERY_STRING', 'k=aa%2F%2Fbb&//q//p//=//a//b//')

In python's CGI server, it is:

('QUERY_STRING', 'k=aa/bb&/q/p/=/a/b/'),

----------
nosy: +xiang.zhang

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue24657>
_______________________________________


More information about the Python-bugs-list mailing list