Issues

Select view

Select search mode

 

cfhttp fails with non ascci characters

Fixed

Description

the following code

cfhttp(url="http://lucee.org") { cfhttpparam(type = "url", name = "album", value = "33%+DeGras"); } dump(cfhttp);

causing the following exception:

lucee.runtime.exp.NativeException: Malformed escape pair at index 25: http://lucee.org?album=33%+DeGras
at java.net.URI.create(URI.java:852)
at lucee.runtime.tag.HttpGetWithBody.(Http.java:1876)
at lucee.runtime.tag.Http._doEndTag(Http.java:801)
at lucee.runtime.tag.Http.doEndTag(Http.java:683)
at test2_cfm$cf$7.call(/test2.cfm:3)
at lucee.runtime.PageContextImpl._doInclude(PageContextImpl.java:945)
at lucee.runtime.PageContextImpl._doInclude(PageContextImpl.java:837)
at lucee.runtime.listener.ModernAppListener._onRequest(ModernAppListener.java:216)
at lucee.runtime.listener.MixedAppListener.onRequest(MixedAppListener.java:42)
at lucee.runtime.PageContextImpl.execute(PageContextImpl.java:2416)
at lucee.runtime.PageContextImpl._execute(PageContextImpl.java:2406)
at lucee.runtime.PageContextImpl.executeCFML(PageContextImpl.java:2381)
at lucee.runtime.engine.Request.exe(Request.java:43)
at lucee.runtime.engine.CFMLEngineImpl._service(CFMLEngineImpl.java:1127)
at lucee.runtime.engine.CFMLEngineImpl.serviceCFML(CFMLEngineImpl.java:1073)
at lucee.loader.engine.CFMLEngineWrapper.serviceCFML(CFMLEngineWrapper.java:97)
at lucee.loader.servlet.CFMLServlet.service(CFMLServlet.java:51)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:741)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:231)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:53)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:199)

Environment

None

Details

Assignee

Reporter

Priority

Fix versions

New Issue warning screen

Before you create a new Issue, please post to the mailing list first https://dev.lucee.org

Once the issue has been verified, one of the Lucee team will ask you to file an issue

Sprint

Created 19 March 2020 at 10:35
Updated 30 November 2024 at 13:21
Resolved 24 March 2020 at 08:05

Activity

Show:

Michael Offner19 March 2020 at 14:45

problem is that “%+D“ is detected as a valid url encoding because it accepts “+D“ as a valid hex value…

Michael Offner19 March 2020 at 10:39

it only happens with cfhttpparam, when the params are passed as part of the URL, all is fine

This works as expected:

cfhttp(url="http://lucee.org?album=33%+DeGras") { } dump(cfhttp);

 

Flag notifications