remove any query_string before chdir #4
Loading…
Reference in New Issue
No description provided.
Delete Branch "phoebos/vger:query_string_slashes"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
a query string could contain a '/' character, which would make vger try
to chdir to an incorrect directory. remove the query string before this,
and before percent-decoding (in case there is an encoded '?'). This
should happen even if we are not doing cgi, because some clients might
send a query string anyway, which should be ignored.
found this bug from this request:
(the request should have been percent-encoded, but vger still shouldn't separate query strings so late)
thank you very much for the fix