[ 
https://issues.apache.org/jira/browse/WICKET-40?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12479375
 ] 

Jan Bareš commented on WICKET-40:
---------------------------------

I don't have the possibility to test fresh SVN copy now, but I tried on 
wicket-examples:
http://www.wicket-library.com/wicket-examples/niceurl/path/to/page2/param2/sla%2Fsh/param1/sss

The param2 should display "sla/sh" but instead wicket crashes.


> Parameters of nice URL's pages with 'sensitive' characters
> ----------------------------------------------------------
>
>                 Key: WICKET-40
>                 URL: https://issues.apache.org/jira/browse/WICKET-40
>             Project: Wicket
>          Issue Type: Bug
>          Components: wicket
>    Affects Versions: 1.2.3
>            Reporter: Jan Bareš
>         Assigned To: Alastair Maw
>
> Wicket uses HttpServletRequest.getPathInfo() to get the the URL. The returned 
> string is already URL decoded, so when the request parameter pair contains 
> %2F, it will be returned as '/', so the request pair will be broken (the same 
> applies to other characters like '+' etc). This was cseen with Jetty 6 and 
> Tomcat 5.5.
> Wicket should use HttpServletRequest.getRequestURI() or getRequestURL() as 
> this seems to return URL as it was passed to the server.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.

Reply via email to