Summary: | modrewrite do not decode hex econde uri | ||
---|---|---|---|
Product: | Apache httpd-2 | Reporter: | Alessandro Fiorenzi <fiorenzi> |
Component: | Other Modules | Assignee: | Apache HTTPD Bugs Mailing List <bugs> |
Status: | RESOLVED FIXED | ||
Severity: | major | Keywords: | RFC, TestID |
Priority: | P2 | ||
Version: | 2.0.54 | ||
Target Milestone: | --- | ||
Hardware: | All | ||
OS: | Linux |
Description
Alessandro Fiorenzi
2007-07-27 10:00:31 UTC
So, why exactly didn't you read/respond to the thread that you raised on users@httpd.apache.org before filing this bug? Anyway, the character '/' is in the RFC 2396 "reserved" set and is therefore not equivalent to its hex encoding. Apache httpd ALWAYS responds with a 404 to requests containing %2f unless AllowEncodedSlashes is set on. Therefore there is no possibility to bypass rewriterules. |