[
https://issues.apache.org/jira/browse/OFBIZ-5910?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14322434#comment-14322434
]
Jacopo Cappellato commented on OFBIZ-5910:
------------------------------------------
Thanks Gareth, your patch is in rev. 1660031 with the following commit log:
{quote}Applied patch contributed by Gareth Carter in OFBIZ-5910: it is a fix
for a bug introduced by the fix for OFBIZ-3382.
The issue reported in OFBIZ-3382 and the fix committed for it need to be
reviewed and possibly reworked but in the meantime this fix will solve the
problem with broken links reported recently.{quote}
> WidgetWorker.buildHyperlinkUrl generates invalid url when using certain
> sequences of characters
> -----------------------------------------------------------------------------------------------
>
> Key: OFBIZ-5910
> URL: https://issues.apache.org/jira/browse/OFBIZ-5910
> Project: OFBiz
> Issue Type: Bug
> Components: framework
> Affects Versions: Trunk
> Reporter: Gareth Carter
> Assignee: Jacopo Cappellato
> Attachments: WidgetWorker.patch
>
>
> If you define a url with parameters or contains url encoded parameters, the
> output from WidgetWorker.buildHyperlinkUrl may be invalid. This is because of
> using StringUtil.defaultWebEncoder.canonicalize(localRequestName).
> eg
> abc=&or1=123 -> abc=?1=123
> abc=&to1=123 -> abc=&to1=123 (this one is fine)
> abc=&and1=123 -> abc=?1=123
> abc=&gtabc=123 -> abc=>abc=123
> The owasp HTMLEntityCodec seems to look for special sequences (or, and, gt,
> lt etc) and change them. This to me is invalid because url encoding and html
> encoding are different
> Why are the urls encoding the ampersands anyway? (String localRequestName =
> UtilHttp.encodeAmpersands(target);).
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
