>Number: 805 >Category: general >Synopsis: multiple slashes before a ~user path are incorrectly handled >Confidential: no >Severity: serious >Priority: medium >Responsible: apache (Apache HTTP Project) >State: open >Class: sw-bug >Submitter-Id: apache >Arrival-Date: Mon Jun 30 19:20:01 1997 >Originator: [EMAIL PROTECTED] >Organization: apache >Release: 1.2.0 >Environment: IRIX 5.3 02091401 IP22 gcc version 2.7.2 OPTIM=-O2 >Description: Having multiple slashes immediately preceding a ~ causes the URL to be incorrectly evaluated (generating a 404). Multiple slashes elsewhere in the URL are resolved properly. This is mainly directed at http_request.c but might also apply to mod_rewrite.c as well. >How-To-Repeat: All of the following URL's should resolve to the same document: http://www.tjhsst.edu/~nallen/ (relative, works correctly) http://www.tjhsst.edu//~nallen/ (relative, gives a 404) http://www.tjhsst.edu/people/nallen/ (absolute, works correctly) http://www.tjhsst.edu//people//nallen/ (absolute, works correctly)
Following multiple slashes work correctly: http://www.tjhsst.edu/~nallen//lunar/ (works fine) >Fix: Add a call to no2slash in http_request.c before ~user paths are evaluated, or check explicitly for beginning multiple slashes. %0 >Audit-Trail: >Unformatted:
