[ 
https://issues.apache.org/jira/browse/CXF-6849?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Michael Schilling updated CXF-6849:
-----------------------------------
    Description: 
Making a POST call that has form parameter name of {{%25}} produces a 
{{BufferUnderflowException}}.

Additionally, making a POST call with a form parameter name of {{%25}} directly 
followed by any character that can't represent a hexadecimal value will produce 
a {{RuntimeException}} stating {{"Invalid URL encoding: not a valid digit 
(radix 16): <byte value>"}}.

The source of these exceptions are from {{UrlUtils#urlDecode}} and 
{{UrlUtils#digit16}}.

Note: {{%25}} is the URL encoded version of {{%}}. The HTTP request send has a 
desired form parameter of {{%}}.

  was:
Making a POST call that has form parameter name of {{%25}} produces a 
{{BufferUnderflowException}}.

Additionally, making a POST call with a form parameter name of {{%25}} directly 
followed by any character that can't represent a hexadecimal value will produce 
a {{RuntimeException}} stating {{"Invalid URL encoding: not a valid digit 
(radix 16): <byte value>"}}.

The source of these exceptions are from {{UrlUtils#urlDecode}} and 
{{UrlUtils#digit16}}.

Note: {{%25}} is the URL encoded version of {{%}}. The HTTP request send has a 
desired form parameter of {{{%}}.


> Form parameter names including '%' are not decoded properly
> -----------------------------------------------------------
>
>                 Key: CXF-6849
>                 URL: https://issues.apache.org/jira/browse/CXF-6849
>             Project: CXF
>          Issue Type: Bug
>    Affects Versions: 3.1.6
>            Reporter: Michael Schilling
>
> Making a POST call that has form parameter name of {{%25}} produces a 
> {{BufferUnderflowException}}.
> Additionally, making a POST call with a form parameter name of {{%25}} 
> directly followed by any character that can't represent a hexadecimal value 
> will produce a {{RuntimeException}} stating {{"Invalid URL encoding: not a 
> valid digit (radix 16): <byte value>"}}.
> The source of these exceptions are from {{UrlUtils#urlDecode}} and 
> {{UrlUtils#digit16}}.
> Note: {{%25}} is the URL encoded version of {{%}}. The HTTP request send has 
> a desired form parameter of {{%}}.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to