[ http://issues.apache.org/jira/browse/HTTPCLIENT-587?page=all ]
Oleg Kalnichevski updated HTTPCLIENT-587:
-----------------------------------------
Component: HttpClient
Fix Version: 3.1 Alpha 1
Looks good to me. I'll check in the patch in a few days if nobody complains
Oleg
> derelativizing of relative URIs with a scheme is incorrect
> ----------------------------------------------------------
>
> Key: HTTPCLIENT-587
> URL: http://issues.apache.org/jira/browse/HTTPCLIENT-587
> Project: Jakarta HttpClient
> Type: Bug
> Components: HttpClient
> Versions: 3.0.1
> Reporter: Gordon Mohr
> Fix For: 3.1 Alpha 1
> Attachments: httpclient-587.patch
>
> URI constructor "public URI(URI base, URI relative) throws URIException"
> assumes that if given 'relative' URI has a scheme, it should provide an
> authority and complete path to the constructed URI. However, a URI can have a
> scheme but still be relative, requiring the authority and base path of the
> 'base' URI.
> Demonstration code:
> URI base = new URI("http://www.example.com/some/page";);
> URI rel = new URI("http:boo");
> URI derel = new URI(base,rel);
> derel.toString();
> (java.lang.String) http:boo
> In fact, derel should be "http://www.example.com/some/boo";.
> RFC2396 is a little confused about this; section 3.1 states ""Relative URI
> references are distinguished from absolute URI in that they do not begin with
> a scheme name." But, in section 5, there are several sentences talking about
> relative URIs that begin with schemes (and how this prevents using relative
> URIs that have leading path segments that look like scheme identifiers).
> RFC3896, which supercedes RFC2396, removes the implication a relative URI
> cannot begin with a scheme, leaving the other text explcitly discussing
> relative URIs with schemes.
> Both Firefox (1.5) and IE (6.0) treat "http:boo" the same as "boo" for
> purposes of derelativization against an HTTP base URI, which would give the
> final URI "http://www.example.com/some/boo"; in the example above.
> Even relative URIs like "http:../../boo" are explicitly legal.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
http://www.atlassian.com/software/jira
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
