https://bz.apache.org/bugzilla/show_bug.cgi?id=59688
Bug ID: 59688
Summary: Path normalization: dot segments with extra slashes
resolves to unexpected path
Product: Apache httpd-2
Version: 2.4.20
Hardware: PC
OS: All
Status: NEW
Severity: trivial
Priority: P2
Component: Core
Assignee: [email protected]
Reporter: [email protected]
Apache httpd resolves paths with extra slashes and dot segments differently
than other HTTP servers and clients. It looks like it's collapsing redundant
slashes *after* it resolves relative path segments instead of before.
Program Input Resolved to
--------------------- ---------- -----------
Apache httpd /foo///../ /foo/
NGINX /foo///../ /
Tomcat getServletPath /foo///../ /
Node Path.normalize /foo///../ /
Windows filesystem /foo///../ /
Linux filesystem /foo///../ /
Akamai /foo///../ /foo/../
Chrome /foo///../ /foo//
Firefox /foo///../ /foo//
Edge /foo///../ /foo//
RFC 3986 doesn't specifically address duplicate slashes, so I'm unclear on what
the correct behavior is.
https://bz.apache.org/bugzilla/show_bug.cgi?id=49396 is somewhat be related.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
