Re: URL-encoding and "#"

2017-10-15 Thread Alex O'Ree
What was unexpected for me, was that even if the the symbol is URL encoded, it was still stripped out by tomcat. I understand now allowing a backslash in a URL, however if it is URL encoded as %5C then why not allow it? Maybe I'm missing something On Fri, Oct 13, 2017 at 7:17 AM,

Re: URL-encoding and "#"

2017-10-13 Thread Mark Thomas
On 13/10/17 18:42, André Warnier (tomcat) wrote: > On 13.10.2017 19:29, Mark Thomas wrote: >> On 13/10/2017 18:15, André Warnier (tomcat) wrote: >>> On 13.10.2017 18:17, Mark Thomas wrote: On 13/10/2017 17:09, James H. H. Lampert wrote: > Thanks to all of you who responded. > > I

Re: URL-encoding and "#"

2017-10-13 Thread James H. H. Lampert
On 10/13/17, 10:50 AM, Igal @ Lucee.org wrote: On 10/13/2017 10:42 AM, André Warnier (tomcat) wrote: Mmm. You are being a bit casuistic here. (Granted, not that I wasn't.) In the real world, I would expect that 99% of what is ever POSTed, /is/ form data. Not you ? 10 years ago I would have

Re: URL-encoding and "#"

2017-10-13 Thread Igal @ Lucee.org
On 10/13/2017 10:42 AM, André Warnier (tomcat) wrote: Mmm. You are being a bit casuistic here. (Granted, not that I wasn't.) In the real world, I would expect that 99% of what is ever POSTed, /is/ form data. Not you ? 10 years ago I would have agreed, but with REST services there are many

Re: URL-encoding and "#"

2017-10-13 Thread tomcat
On 13.10.2017 19:29, Mark Thomas wrote: On 13/10/2017 18:15, André Warnier (tomcat) wrote: On 13.10.2017 18:17, Mark Thomas wrote: On 13/10/2017 17:09, James H. H. Lampert wrote: Thanks to all of you who responded. I found a web page that explains it in ways that I can wrap my 55-year-old

Re: URL-encoding and "#"

2017-10-13 Thread Mark Thomas
On 13/10/2017 18:15, André Warnier (tomcat) wrote: > On 13.10.2017 18:17, Mark Thomas wrote: >> On 13/10/2017 17:09, James H. H. Lampert wrote: >>> Thanks to all of you who responded. >>> >>> I found a web page that explains it in ways that I can wrap my >>> 55-year-old brain around, and has an

Re: URL-encoding and "#"

2017-10-13 Thread tomcat
On 13.10.2017 18:17, Mark Thomas wrote: On 13/10/2017 17:09, James H. H. Lampert wrote: Thanks to all of you who responded. I found a web page that explains it in ways that I can wrap my 55-year-old brain around, and has an easy-to-read reference chart.

Re: URL-encoding and "#"

2017-10-13 Thread Mark Thomas
On 13/10/2017 17:09, James H. H. Lampert wrote: > Thanks to all of you who responded. > > I found a web page that explains it in ways that I can wrap my > 55-year-old brain around, and has an easy-to-read reference chart. > > https://perishablepress.com/stop-using-unsafe-characters-in-urls/ > >

Re: URL-encoding and "#"

2017-10-13 Thread James H. H. Lampert
Thanks to all of you who responded. I found a web page that explains it in ways that I can wrap my 55-year-old brain around, and has an easy-to-read reference chart. https://perishablepress.com/stop-using-unsafe-characters-in-urls/ Question: the problem first showed up on a web service that

Re: URL-encoding and "#"

2017-10-13 Thread i...@flyingfischer.ch
Am 13.10.2017 um 12:48 schrieb Alex O'Ree: > Well that explains a lot. Similar issue for me. With url encoding, tomcat > is dropping back slash and the plus symbol. While I think it is perfectly eligible to strive for a most perfect alignement with standards and specs, I think Tomcat should

Re: URL-encoding and "#"

2017-10-13 Thread Alex O'Ree
Well that explains a lot. Similar issue for me. With url encoding, tomcat is dropping back slash and the plus symbol. On Oct 13, 2017 3:01 AM, "Mark Thomas" wrote: > On 13/10/2017 07:38, Peter Kreuser wrote: > > Chris, > > > > > > > > > > Peter Kreuser > >> Am 13.10.2017 um

Re: URL-encoding and "#"

2017-10-13 Thread i...@flyingfischer.ch
Am 13.10.2017 um 09:01 schrieb Mark Thomas: > From memory, # isn't one of the allowed exceptions. > > The full list of invalid characters in the request line that Tomcat > started to check for is: > ' ', '\"', '#', '<', '>', '\\', '^', '`', '{', '|', '}' > > The allowed exceptions are (currently)

Re: URL-encoding and "#"

2017-10-13 Thread Mark Thomas
On 13/10/2017 07:38, Peter Kreuser wrote: > Chris, > > > > > Peter Kreuser >> Am 13.10.2017 um 04:29 schrieb Christopher Schultz >> : >> > James, > On 10/12/17 8:44 PM, James H. H. Lampert wrote: Question: The application we're developing has

Re: URL-encoding and "#"

2017-10-13 Thread Peter Kreuser
Chris, Peter Kreuser > Am 13.10.2017 um 04:29 schrieb Christopher Schultz > : > > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > James, > >> On 10/12/17 8:44 PM, James H. H. Lampert wrote: >> Question: >> >> The application we're developing has a suite

Re: URL-encoding and "#"

2017-10-12 Thread Christopher Schultz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 James, On 10/12/17 8:44 PM, James H. H. Lampert wrote: > Question: > > The application we're developing has a suite of web services > (RESTful, Swagger-based), and at least one of them can accept a > pound sign ("#") as a URL parameter. > >

RE: URL encoding problem IIS6 / JK1.2.25 / Tomcat 5.5.20

2008-06-25 Thread Jesse Klaasse
André Warnier wrote: It would appear (from the logs), that there is some double-encoding of the URI going on. [snip] But, if somewhere along the line, a piece of code was receiving the encoded URI http://.../test%5Bbrackets%5D.jsp;, and decided to re-encode it again using the % hex hex method,

Re: URL encoding problem IIS6 / JK1.2.25 / Tomcat 5.5.20

2008-06-25 Thread André Warnier
Jesse Klaasse wrote: [...] Good. Now, I should add that using [ and ] in URL's is not really something I would recommend, if only for legibility reasons. It will always make people wonder if what they're seeing in the logfile is normal, or if it's some programming syntax which escaped

Re: URL encoding problem IIS6 / JK1.2.25 / Tomcat 5.5.20

2008-06-25 Thread André Warnier
Jesse Klaasse wrote: [...] Good. Now, I should add that using [ and ] in URL's is not really something I would recommend, if only for legibility reasons. It will always make people wonder if what they're seeing in the logfile is normal, or if it's some programming syntax which escaped

RE: URL encoding problem IIS6 / JK1.2.25 / Tomcat 5.5.20

2008-06-25 Thread Jesse Klaasse
André Warnier wrote: [...] Now, I should add that using [ and ] in URL's is not really something I would recommend, if only for legibility reasons. It will always make people wonder if what they're seeing in the logfile is normal, or if it's some programming syntax which escaped there. And I