[ 
https://issues.apache.org/jira/browse/WW-4448?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14285304#comment-14285304
 ] 

ASF subversion and git services commented on WW-4448:
-----------------------------------------------------

Commit 0f44e11cd1f3cff51ed4a2a10dec593d8822ade2 in struts's branch 
refs/heads/develop from [~lukaszlenart]
[ https://git-wip-us.apache.org/repos/asf?p=struts.git;h=0f44e11 ]

WW-4448 Strips params and replaces spaces


> Parameters are not encoded by ServletRedirectAction before checking for valid 
> URI
> ---------------------------------------------------------------------------------
>
>                 Key: WW-4448
>                 URL: https://issues.apache.org/jira/browse/WW-4448
>             Project: Struts 2
>          Issue Type: Bug
>          Components: Core Actions
>    Affects Versions: 2.3.20
>            Reporter: Mitth'raw'nuruodo
>              Labels: encoding, redirect, url
>             Fix For: 2.3.22
>
>
> WW-4187 changed ServletRedirectResult to use java.net.URI to check whether a 
> redirect URL is actually a path. However, it does not encode parameters 
> first, which will often result in a URL being deemed invalid (eg if one of 
> the parameters contains spaces) and thus being treated as a path.
> Where I work, we actually don't want parameters to be appended to our 
> absolute redirects at all, but I can't see a way to disable 
> this...DefaultResultFactory doesn't seem to be configurable.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to