View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0007257 | mantisbt | bugtracker | public | 2006-07-04 23:05 | 2006-09-12 00:52 |
Reporter | thraxisp | Assigned To | thraxisp | ||
Priority | normal | Severity | major | Reproducibility | always |
Status | closed | Resolution | fixed | ||
Product Version | 1.0.3 | ||||
Fixed in Version | 1.1.0a1 | ||||
Summary | 0007257: Port: Fix for 0006869 / 0007034 removes quoted "?" from arguments | ||||
Description | The fix for 0006869 / 0007034 (in cvs) removes quoted "?" from arguments with the lines
Is there some security reason for this? I have not found a code break in a release version, but it breaks my patch in 0005432. This produces urls like:
after string_sanitize_url this is transformed to
Note that the "%3f" for ? has been removed and the new url is invalid. If there is no security reason for it, I would suggest removing the "$t_param = str_replace( '?','', $t_param );" line. | ||||
Tags | No tags attached. | ||||