Chrome escapes some characters but not others
Reported by
p...@lucidchart.com,
Jun 2 2016
|
||
Issue descriptionUserAgent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/50.0.2661.86 Safari/537.36 Example URL: http://example.com/a b<c^d Steps to reproduce the problem: Attempt navigation to http://example.com/a b<c^d|e{f What is the expected behavior? Chrome should either escape the illegal characters, or provide an error. What went wrong? Chrome escapes the space with %20 and the less-than with %3D. It did not, however, escape the caret, pipe, or brace. Did this work before? No Chrome version: 50.0.2661.86 Channel: n/a OS Version: Flash Version: Shockwave Flash 21.0 r0 It's inconsistent to automatically escape some illegal characters to be escaped but not others. It means that Chrome can issue malformed HTTP requests.
,
Jun 2 2016
Using net-log I can see, here is the URL request that is sent by chrome: http://example.com/a%20b%3Cc%5Ed%7Ce%7Bf which is consistently escaping all characters.
,
Jun 3 2016
Apologies, this should be http://example.com/?a b<c^d|e{f Apparently it is different if the character is in the path or the query string. |
||
►
Sign in to add a comment |
||
Comment 1 by l446240525@gmail.com
, Jun 2 2016132 KB
132 KB View Download