Hi,

On Tue, Feb 15, 2011 at 12:20:35PM +0100, Martin Edenhofer wrote:
> > In other words, the string "/file-2" (which depends on the name of the
> > attachment, of course) is mistakenly inserted between "index.pl" and
> > "?".
> The reason why it has changed is, because it's a workaround for IE
> to support multi byte of attachment filenames.

Mmh.  In our setup, this means the web server returns 500. :-(

> So the new URL (https://[ServerURL]/otrs/index.pl/file-2?Action...)
> will execute index.pl

Erm, interesting...   Our web server won't execute "index.pl" upon a
request for "index.pl/something".  Hm.

> and for IE the file name is "file-2" (or in
> case a multi byte filenames) if you want to save the file. For all
> other browsers "/file-2" will not have any meaning because the file
> name is taken from http header (Content-Disposition).

Yeah, but why would the web server execute index.pl when it is told to
load index.pl/something?  Am I missing something obvious?

Cheers,
Toby.
-- 
Why crawl through Windows when there are doors?

----

Karlsruhe Institute of Technology (KIT)
KIT-CERT

Tobias Dussa
CERT Manager/CA Manager

Zirkel 2
Building 20.21
76131 Karlsruhe, Germany

!!! New phone number
Phone: +49 721 608-42479                                                        
                                                             
!!! New fax number
Fax: +49 721 608-9-42479
Email: tobias.du...@kit.edu
Web: http://www.kit.edu/

KIT – University of the State of Baden-Wuerttemberg and
National Laboratory of the Helmholtz Association

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
OTRS mailing list: dev - Webpage: http://otrs.org/
Archive: http://lists.otrs.org/pipermail/dev
To unsubscribe: http://lists.otrs.org/cgi-bin/listinfo/dev

Reply via email to