Uploaded image for project: 'Undertow'
  1. Undertow
  2. UNDERTOW-2162

Query parameters should not be canonicalized in servlet path when get request dispatcher

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Major Major
    • 2.3.0.Final, 2.2.21.Final
    • 2.2.19.Final
    • Core
    • None
    • Hide
      • For any dispatch url with special characters inside, for example, url in query parameters. If we use 
        request.getRequestDispatcher("/aaa?url=http://bb.com")
      • the result servlet path looks like  
        /aaa?url=http:/bb.com

        where the double slash in query parameter is stripped to a single slash in query params. 

      Show
      For any dispatch url with special characters inside, for example, url in query parameters. If we use request.getRequestDispatcher( "/aaa?url=http: //bb.com" ) the result servlet path looks like  /aaa?url=http:/bb.com where the double slash in query parameter is stripped to a single slash in query params. 

      As part of UNDERTOW-1886, the whole path is canonicalized. If the dispatch url has special characters inside query parameters, for example, url in query parameters (/aaa?url=http://bb.com), it will be incorrectly formatted in ServletContextImpl.getRequestDispatcher to /aaa?url=http:/bb.com, where the double slash is stripped.

            flaviarnn Flavia Rainone
            yfu075 Yao Fu (Inactive)
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

              Created:
              Updated:
              Resolved: