Bug 43972 - mod_proxy does not handel semicolon in URL correct
Summary: mod_proxy does not handel semicolon in URL correct
Status: RESOLVED FIXED
Alias: None
Product: Apache httpd-2
Classification: Unclassified
Component: mod_proxy (show other bugs)
Version: 2.2.6
Hardware: PC Linux
: P2 normal (vote)
Target Milestone: ---
Assignee: Apache HTTPD Bugs Mailing List
URL:
Keywords:
Depends on:
Blocks: 43454
  Show dependency tree
 
Reported: 2007-11-27 06:06 UTC by Joerg Heyne
Modified: 2008-12-26 11:28 UTC (History)
1 user (show)



Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Joerg Heyne 2007-11-27 06:06:32 UTC
Apache configured as a reverse Proxy-Server does not handel URL-Requests with
a semicolon correct.

http://localhost/Test;.doc

Webbrowser -> Apache
Url is encoded as "Test%3b.doc"

Apache Reverse-Proxy -> Backendserver
URL is not encoded: "Test;.doc"

As mentioned in Bug #41798 the URL-Encoding in mod_proxy has a general
problem. This seems to be fiexed for "/" but is not fixed for a ";".
Comment 1 Nick Kew 2007-11-27 06:17:44 UTC
What version did you test?  This should be fully fixed in trunk and 2.2-current,
and hence in 2.2.7 and up.
Comment 2 Joerg Heyne 2007-11-27 07:47:20 UTC
Tested with snapshot-tar.gz-version (witch does not compile correctly because 
of apr error). An backported to 2.2.6.

When will be 2.2.7 released?
Comment 3 Nick Kew 2007-11-27 09:47:45 UTC
(In reply to comment #2)
> Tested with snapshot-tar.gz-version

Erm, that doesn't tell me whether it's a version including the fix.  FWIW, it
works fine for me, so if any version incorporating the fix to 41798 (Nov.20th in
2.2) fails for you, we need to exactly what version.

> When will be 2.2.7 released?

When someone releases it.
Comment 4 Ruediger Pluem 2007-11-27 12:15:38 UTC
(In reply to comment #2)
> 
> When will be 2.2.7 released?

Please have a look on the dev list for that. It is the best place to get this
information.
Comment 5 Nick Kew 2008-12-26 11:28:42 UTC
Presumed fixed; please reopen with details if not.