[
https://issues.apache.org/jira/browse/HTTPCORE-800?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Oleg Kalnichevski updated HTTPCORE-800:
---------------------------------------
Fix Version/s: 5.4.4
5.5-beta3
(was: Future)
> HttpException.clean() incorrectly handles/escapes control characters like
> newline
> ---------------------------------------------------------------------------------
>
> Key: HTTPCORE-800
> URL: https://issues.apache.org/jira/browse/HTTPCORE-800
> Project: HttpComponents HttpCore
> Issue Type: Bug
> Components: HttpCore
> Affects Versions: 5.5-beta2
> Environment: windows/ubuntu
> Reporter: Revathy Ramalingam
> Priority: Major
> Fix For: 5.4.4, 5.5-beta3
>
> Original Estimate: 24h
> Remaining Estimate: 24h
>
> {{HttpException.clean()}} in Apache HttpCore incorrectly handles newline
> characters when sanitizing an exception message.
> When the exception message contains a newline ({{{}\n{}}}), {{clean()}}
> replaces the control character with a hexadecimal representation. However,
> the implementation uses the *character's index in the string* instead of the
> character's actual code point:
>
> {{final String hexString = Integer.toHexString(i);}}
> Here, {{i}} is the index of the character in the message. It should use the
> character itself:
>
> {{final String hexString = Integer.toHexString(ch);}}
> For example, a newline character is ASCII {{10}} ({{{}0x0A{}}}). If the
> newline occurs at index {{54}} in the message, the current implementation
> produces:
>
> {{[0x36]}}
> because {{54}} in hexadecimal is {{{}36{}}}.
> The expected representation should be:
>
> {{[0xA]}}
> or an equivalent representation of the actual character code.
> This causes Kestra HTTP request failure messages containing multiline
> response bodies to display incorrect values such as {{[0x36]}} instead of
> correctly representing the newline character.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
