Page MenuHomePhabricator

Double decoding in URLs causes user to be directed to wrong page
Closed, InvalidPublic

Description

Author: crazyr2

Description:
An attempt to access an article with "%28" or "%29" (and probably other HTML
characters) can only be done if one enters in %252528 in the URL instead of the
expected %2528; for example,
http://en.wikipedia.org/wiki/User:Grunt/Bug_%2528demo%2529 goes to
[[en:User:Grunt/Bug (demo)]] instead of [[en:User:Grunt/Bug %28demo%29]], but
http://en.wikipedia.org/wiki/User:Grunt/Bug_%252528demo%252529 goes to the
proper article. Strangely, visiting
http://en.wikipedia.org/w/wiki.phmtl?title=User%3AGrunt%2FBug_%2528demo%2529
goes to the proper page.


Version: unspecified
Severity: minor
URL: http://en.wikipedia.org/wiki/User%3AGrunt%2FBug_%252528demo%252529

Details

Reference
bz379

Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 6:47 PM
bzimport set Reference to bz379.
bzimport added a subscriber: Unknown Object (MLST).

Problem seems to be with the rewrite URLs, probably Apache is de-escaping and not re-
escaping the percent sign. Raw PATH_INFO also works correctly.

Such titles are not currently legal, so not a problem. :D