Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Issue #11579 - Reject Target in Request Path #11580

Closed
wants to merge 2 commits into from

Conversation

joakime
Copy link
Contributor

@joakime joakime commented Mar 27, 2024

Initial implementation of rejecting a URI Target in the Request Path.

@gregw
Copy link
Contributor

gregw commented Apr 22, 2024

@joakime status?

@joakime
Copy link
Contributor Author

joakime commented Apr 22, 2024

I haven't look at this in a while, since we moved it here from PR #11496
I'll update this PR this week.

Copy link
Contributor

@gregw gregw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is a placeholder review waiting for progress on this. Please request re-review when it is ready.

@joakime
Copy link
Contributor Author

joakime commented Oct 23, 2024

rebase against 12.1.x

Copy link
Contributor

@gregw gregw left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Let me have a go at this from the compliance end of things...

Comment on lines +1460 to +1462
if (last != null && state.ordinal() > last.ordinal())
throw new IllegalArgumentException("uri cannot go beyond " + last);

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't think we should not parse past the fragment etc. We should parse to the end, but record a violation if there is a fragment.

@joakime
Copy link
Contributor Author

joakime commented Nov 11, 2024

Closing in favor of PR #12504

@joakime joakime closed this Nov 11, 2024
@joakime joakime deleted the fix/12.0.x/target-in-request-path branch November 11, 2024 13:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Enhancement Specification For all industry Specifications (IETF / Servlet / etc)
Projects
Status: ✅ Done
Development

Successfully merging this pull request may close these issues.

Introduce UriCompliance.Violation.FRAGMENT to reject HTTP Request Line that includes fragment section.
2 participants