rse 99/10/27 01:10:12
Modified: src CHANGES
src/modules/standard mod_rewrite.c
Log:
Make sure mod_rewrite escapes QUERY_STRINGS on redirects.
Submitted by: Klaus Johannes Rusch <[EMAIL PROTECTED]>
Reviewed by: Ralf S. Engelschall
PR: 4734
Revision Changes Path
1.1441 +3 -0 apache-1.3/src/CHANGES
Index: CHANGES
===================================================================
RCS file: /home/cvs/apache-1.3/src/CHANGES,v
retrieving revision 1.1440
retrieving revision 1.1441
diff -u -r1.1440 -r1.1441
--- CHANGES 1999/10/27 07:56:17 1.1440
+++ CHANGES 1999/10/27 08:10:06 1.1441
@@ -1,5 +1,8 @@
Changes with Apache 1.3.10
+ *) Make sure mod_rewrite escapes QUERY_STRINGS on redirects.
+ [Klaus Johannes Rusch <[EMAIL PROTECTED]>] PR#4734
+
*) Make sure mod_rewrite matches URL schemes case-insensitive and also
allow
additional (commonly used) URL schemes ldap:, news: and mailto:.
[Ralf S. Engelschall, Klaus Johannes Rusch <[EMAIL PROTECTED]>] PR#3140
1.147 +4 -4 apache-1.3/src/modules/standard/mod_rewrite.c
Index: mod_rewrite.c
===================================================================
RCS file: /home/cvs/apache-1.3/src/modules/standard/mod_rewrite.c,v
retrieving revision 1.146
retrieving revision 1.147
diff -u -r1.146 -r1.147
--- mod_rewrite.c 1999/10/27 07:56:22 1.146
+++ mod_rewrite.c 1999/10/27 08:10:10 1.147
@@ -1163,8 +1163,8 @@
/* append the QUERY_STRING part */
if (r->args != NULL) {
- r->filename = ap_pstrcat(r->pool, r->filename,
- "?", r->args, NULL);
+ r->filename = ap_pstrcat(r->pool, r->filename, "?",
+ ap_escape_uri(r->pool, r->args),
NULL);
}
/* determine HTTP redirect response code */
@@ -1458,8 +1458,8 @@
/* append the QUERY_STRING part */
if (r->args != NULL) {
- r->filename = ap_pstrcat(r->pool, r->filename,
- "?", r->args, NULL);
+ r->filename = ap_pstrcat(r->pool, r->filename, "?",
+ ap_escape_uri(r->pool, r->args),
NULL);
}
/* determine HTTP redirect response code */
