WebApp Sec mailing list archives
Double Slashes
From: "Andres Molinetti" <andymolinetti () hotmail com>
Date: Thu, 04 Aug 2005 13:29:48 +0000
Is there anyway to encode a "//" in a GET request to an .ASP page in IIS 5.0 (patched up2date)
For example.. GET /dir1//dir2.asp HTTP/1.0 IIS seems to convert to a single slash the following ones: // \\ /./ /../ ///////// ... Not sure if it is some fix to old unicode and double enconding bugs. Regards, Andy _________________________________________________________________¿Estás pensando en cambiar de coche? Todas los modelos de serie y extras en MSN Motor. http://motor.msn.es/researchcentre/
Current thread:
- Double Slashes Andres Molinetti (Aug 04)
- <Possible follow-ups>
- RE: Double Slashes Jeff Robertson (Aug 04)
- RE: Double Slashes Auri Rahimzadeh (Aug 04)
- RE: Double Slashes Andres Molinetti (Aug 04)
- RE: Double Slashes Jeff Robertson (Aug 04)
- RE: Double Slashes Andres Molinetti (Aug 04)
- RE: Double Slashes Auri Rahimzadeh (Aug 04)
- RE: Double Slashes Auri Rahimzadeh (Aug 04)
- Re: Double Slashes Steven M. Christey (Aug 04)
- RE: Double Slashes Kyle Quest (Aug 05)