This one should handle FPs reported by Wim Borgs.

REPLACE:
   $uri=~s/$URIContinuationRe\.?//go; # and strip line continuations
   # decode quoted-printables
   $uri=~s/\=([a-f0-9]{2})/chr(hex($1))/gie;
   # decode 'at' character
   $uri=~s/\%40/@/g;
   $uri=~s/\&\#0?64\;?/@/g;
   if ($uri=~/(?:[^\s\/[EMAIL PROTECTED]@)?($URIHostRe)/io) {
    $uri=$1;
    # fix HTML
    $uri=~s/[\'\)]+$//;
    $uri=~s/\&(?:nbsp|amp|quot|gt|lt)\;?//gi;
    $orig_uri=$uri;
    $uri=~s/\%([a-f0-9]{2})/chr(hex($1))/gie; # decode percents
    $uri=~s/\&\#(\d{1,3})\;?/chr($1)/ge; # decode &#ddd;'s
    # strip redundant dots
    $uri=~s/\.{2,}/\./g;
    $uri=~s/^\.//;
    $uri=~s/\.$//;
    $uri=~s/$URISubDelimsCharRe//go; # more tricks?

WITH:
   $uri=~s/$URIContinuationRe\.?//go; # and strip line continuations
   $uri=~s/\=([a-f0-9]{2})/chr(hex($1))/gie; # decode quoted-printables
   # decode 'at' character
   $uri=~s/\%40/@/g;
   $uri=~s/\&\#0?64\;?/@/g;
   if ($uri=~/(?:[^\s\/[EMAIL PROTECTED]@)?($URIHostRe)/io) {
    $uri=$1;
    # fix HTML
    $uri=~s/\&\#1[03]\;?.*$//i;
    $uri=~s/\&(?:nbsp|amp|quot|gt|lt)\;?//gi;
    $uri=~s/(?:$URISubDelimsCharRe|\.)+$//;
    $orig_uri=$uri;
    $uri=~s/\%([a-f0-9]{2})/chr(hex($1))/gie; # decode percents
    $uri=~s/\&\#(\d{1,3})\;?/chr($1)/ge; # decode &#ddd's
    # strip redundant dots
    $uri=~s/\.{2,}/\./g;
    $uri=~s/^\.//;
    $uri=~s/$URISubDelimsCharRe//go; # more tricks?


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to