URL query parameters with . (period) in name interpreted as complex objects.

Description

When doing something like:

<cfloop collection="#URL#" item = "sCurrentQueryElement">
<cfif (NOT isSimpleValue(URL[sCurrentQueryElement]))
<cfdump var="#URL#">
</cfif>
</cfloop>

where the urlquery param names contain any . characters are interpreted as structs

this impacts not only the code above doing the cfdump, but trying to reference the variable also.

thispage?var1=dog&var3=apple&what.time=today&what_color=blue

this will result in
var1 = dog
var3 = apple
what["time"] = today (struct with key named 'time')
what_color = blue

according to https://www.ietf.org/rfc/rfc2396 these - _ . ! ~ * ' ( ) are all supposed to be ok to use. Is there something obvious I"m missing here?

Environment

Windows 10 Pro, Apache HTTPD

Activity

Show:

Pothys - MitrahSoft 26 July 2019 at 10:55
Edited

I was closed this ticket. Because of it is a duplicate of https://luceeserver.atlassian.net/browse/LDEV-2374#icft=LDEV-2374

Duplicate

Details

Assignee

Reporter

Priority

New Issue warning screen

Before you create a new Issue, please post to the mailing list first https://dev.lucee.org

Once the issue has been verified, one of the Lucee team will ask you to file an issue

Affects versions

Created 24 July 2019 at 10:33
Updated 18 June 2023 at 16:47
Resolved 26 July 2019 at 10:55

Flag notifications