[
https://issues.apache.org/jira/browse/MYFACES-3731?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Leonardo Uribe resolved MYFACES-3731.
-------------------------------------
Resolution: Fixed
Fix Version/s: 2.1.12
2.0.18
Assignee: Leonardo Uribe
> HTMLEncoder.encodeURIAtributte re-escapes already percent-encoded string
> ------------------------------------------------------------------------
>
> Key: MYFACES-3731
> URL: https://issues.apache.org/jira/browse/MYFACES-3731
> Project: MyFaces Core
> Issue Type: Bug
> Affects Versions: 2.1.11
> Reporter: dennis hoersch
> Assignee: Leonardo Uribe
> Fix For: 2.0.18, 2.1.12
>
>
> In HTMLEncoder.encodeURIAtributte is a check to not re-escape already
> percent-encoded parts. But that code assumes the percent-encoded symbols to
> be uppercase letters.
> So in the following link the '%2b' is escaped to '%252b':
> Original:
> "http://host/app/?ae=Item&a=Open&t=IPM.Note&id=RgAAAAB4E8INIm43RZNuTeFByn9IBwCfBp1RvH2jT7X5YNYS8KZjAAAApBU%2bAABNyiydsdzWRbj76MCJ9qhxAAAAmaj0AAAJ&exvsurl=1";;
> Encoded:
> "http://host/app/?ae=Item&a=Open&t=IPM.Note&id=RgAAAAB4E8INIm43RZNuTeFByn9IBwCfBp1RvH2jT7X5YNYS8KZjAAAApBU%252bAABNyiydsdzWRbj76MCJ9qhxAAAAmaj0AAAJ&exvsurl=1
> (http://tools.ietf.org/html/rfc3986#page-12 says uppercase and lowercase
> letters have to be considered as equal.)
--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira
