WebApp Sec mailing list archives

Re: java.net.URI.normalize() problem


From: Felipe Moreno <fmoreno () gmail com>
Date: Sat, 19 Feb 2005 00:59:22 +0100


then what do you think it should do with these two?

http://foo.com/A?hello/there
http://foo.com/A%3Fhello/there

Should they have the same meaning?


Of course not. URI cannot take the decision to decode the path before
normalization as it does not have enough information about what the
path really represents.

Thanks, now I see the legitimate reason :-)


Current thread: