#23173: SCRIPT_URL on WSGI is misinterpreted when PATH_INFO is empty
-------------------------+-------------------------------------------------
Reporter: j-sz@… | Owner: nobody
Type: Bug | Status: new
Component: Core | Version: master
(URLs) | Keywords: wsgi, script name, negative index
Severity: Normal | slicing
Triage Stage: | Has patch: 0
Unreviewed | UI/UX: 0
Easy pickings: 0 |
-------------------------+-------------------------------------------------
This bug is pretty obvious. In the dev version it's in
django/core/handlers/wsgi.py:235 in get_script_name; in 1.5.1 (where I've
found it) it's in django/core/handlers/base.py:280. I haven't checked how
long it's been there.
The problem is due to slicing with a negative end index:
{{{
script_name = script_url[:-len(path_info)]
}}}
It works fine as long as path_info is not empty. On my system it was empty
and the whole script_url was truncated.
I've grepped the source tree for `'\[:-[^0-9]'` to check if there are some
other instances of this pattern and it returned a couple of results. I'd
suggest examining them and making sure the indices are non-zero.
A patch would be trivial, but I'm not giving it, because I feel that a
general function 'chop off n elements from the end' might be handy and I'm
not sure where to put it.
--
Ticket URL: <https://code.djangoproject.com/ticket/23173>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to django-updates+unsubscr...@googlegroups.com.
To post to this group, send email to django-updates@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/053.fe9bcab8c9b6c6394cfd897d10655d3d%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.
