Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Critical
Fix Version/s: 7.4.3.CR1, 7.4.3.GA
Affects Version/s: 7.4.2.GA
Component/s: Security
Labels:
- regression_test_only

Blocked:
False
Ready:
False
CDW devel_ack:
CDW docs_ack:
CDW pm_ack:
CDW qa_ack:
CDW release:
QE Test Coverage:
?
Target Release:

7.4.z.GA
Git Pull Request:
https://github.com/wildfly-security/elytron-web/pull/206
Market:

SFDC Cases Counter:
SFDC Cases Open:
SFDC Cases Links:

The 7 argument java.net.URI constructor encodes the parameters that are passed in. This is problematic because if an encoded query string is passed in, it will be encoded again (see ~~AF-2908~~).

Elytron should not be encoding query strings or other parameters. It should just be using the request URI from Undertow without making any changes.

We should update ElytronHttpExchange#getRequestUri to use a StringBuilder instead of the 7 argument constructor.

clones

ELYWEB-163 Update ElytronHttpExchange#getRequestURI to no longer use the 7 argument URI constructor

Resolved

incorporates

RHPAM-4011 Asset with space in name cannot be opened in standalone editor

Closed

is incorporated by

JBEAP-22833 (7.4.z) Upgrade elytron-web from 1.9.1.Final-redhat-00001 to 1.9.2.Final-redhat-00001

Closed

Assignee:: Farah Juma

Reporter:: Farah Juma

Votes:: 0 Vote for this issue

Watchers:: 5 Start watching this issue

Created:: 2021/11/26 2:07 PM

Updated:: 2022/02/02 1:24 PM

Resolved:: 2021/11/30 4:05 AM

Details

Description

Attachments

Issue Links

Activity

People

Dates

Hide