HTTP URLs pass parameters in GET requests by appending name=value pairs to the URL, separated by the ampersand character.

XHTML Strict does not permit the ampersand character, but rather requires an 'escaped' entity reference & followed by a-m-p-semicolon: &

Safari version 2.0.2 (416.12) passes this in the URL as the Unicode entity & -- & followed by hash-three-eight-semicolon.

The Tomcat servlet container blows this off; the Java JDK 1.5.0_05 does not interpret such a string as a valid URL query parameter.

Safari with WebKit via today's (10-Nov-2005) CVS does NOT have this problem.

Mozilla, FireFox, and Camino likewise do not pass this entity in the URL, but rather pass the "bare" ampersand character, which is the correct behavior.

rdar://4338299

Looks like it is fixed with the WebKit in CVS.

<?xml version="1.0" encoding="UTF-8"?>

<html xmlns="http://www.w3.org/1999/xhtml"; xml:lang="en" lang="en">
   <head>
      <title>Session Expired</title>
      <meta http-equiv="Content-type" content="text/html"/>
   </head>
   <body>
      <p>
         <a href="http://localhost:8080/proposal/test/DumpPost?action=login&amp;returnAddress=http://localhost:8080/proposal/FrontPage"; shape="rect">
Click here to go to test against the Post Dumper.</a>
      </p>
   </body>
</html>
_______________________________________________
webkit-dev mailing list
[email protected]
http://www.opendarwin.org/mailman/listinfo/webkit-dev

Reply via email to