https://bz.apache.org/bugzilla/show_bug.cgi?id=69203

--- Comment #1 from Eric Covener <[email protected]> ---
Looks like a candidate for 2.4.64, CGI spec says:

4.1.13.  SCRIPT_NAME

   The SCRIPT_NAME variable MUST be set to a URI path (not URL-encoded)
   which could identify the CGI script (rather than the script's
   output).  The syntax is the same as for PATH_INFO (section 4.1.5)


So I think when we recenly added this canonicalization, we were too aggressive.
I think we need a version that focuses on delimiters only (maybe even just the
problematic ?)

classic bug with lots of trivia/info
https://bz.apache.org/bugzilla/show_bug.cgi?id=51517

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to