On 08/13/2010 09:06 AM, Ray_Net wrote:
> NoOp wrote:
>> On 08/12/2010 04:42 PM, NoOp wrote:
>> ...
>>> I agree with David regarding the rfc... however:
>>>
>>> The link doesn't work with Opera (linux) as well.
>>>
>>> But it *does* work with Chromium 5.0.375.125 (53311) Ubuntu 10.04
>>> (linux), and Epiphany Web Browser 2.30.2 (linux).
>>
>> Sorry, forgot to mention that Epiphany changes the url to:
>> http://home.scarlet.be/~pin10521/IMAGES/pose-yoga.jpg
>> As does Chromium:
>> http://home.scarlet.be/~pin10521/IMAGES/pose-yoga.jpg
>> from:
>> http://home.scarlet.be/~pin10521/IMAGES%5Cpose-yoga.jpg

Sorry should have been:
from:
http://home.scarlet.be/~pin10521/IMAGES\pose-yoga.jpg
SeaMonkey adds the %5C as in:
http://home.scarlet.be/~pin10521/IMAGES%5Cpose-yoga.jpg
The others changed the backslash (\) to a forward slash (/).

> 
> 
> Therefore SM could do the same ... isn't it ?

I reckon so... file a bug report.

May be related to the code in this one that I filed last year?

https://bugzilla.mozilla.org/show_bug.cgi?id=531210
[When accessing urls in SeaMonkey with %20, it is replaced with a
whitespace. Breaks other software if you try to copy-paste part of the
url out of SeaMonkey]

So lets have a look & see if we can find anything:
<https://bugzilla.mozilla.org/buglist.cgi?query_format=specific&order=relevance+desc&bug_status=__open__&product=SeaMonkey&content=%255C>

<https://bugzilla.mozilla.org/buglist.cgi?query_format=specific&order=relevance+desc&bug_status=__open__&product=Firefox&content=%255C>

I don't know much about it, but googling on:
<http://www.google.com/search?hl=en&complete=0&q=mozilla+%2B"%255C"&btnG=Search>

These might be of interest:
http://msmvps.com/blogs/bernard/archive/0001/01/01/15136.aspx
[Update - ASP.NET Vulnerability]
<https://developer.mozilla.org/en/Core_JavaScript_1.5_Reference/Global_Functions/encodeURIComponent>
[encodeURIComponent]
<quote>
encodeURIComponent escapes all characters except the following:
alphabetic, decimal digits, - _ . ! ~ * ' ( )
</quote>
<https://developer.mozilla.org/en/Core_JavaScript_1.5_Reference/Global_Functions/encodeURI>

As mentioned - I really don't know much about the subject. But maybe the
above will help (or confuse more) & prompt someone more knowledgeable to
comment.

_______________________________________________
support-seamonkey mailing list
[email protected]
https://lists.mozilla.org/listinfo/support-seamonkey

Reply via email to