Package: w3m
Version: 0.5.3+git20230121-2
Severity: normal

Dear Maintainer,

When submitting a form like
        <form method=post enctype=text/plain>
                <input type=text   name=vendor  value=http                  
hidden readonly>
                <input type=text   name=archive value=yes-i-really-want-one 
hidden readonly>
                <input type=submit name=type    value=tar>
                <input type=submit name=type    value=zip>
w3m sends
        1399494 write(5, "POST / HTTP/1.0\r\nUser-Agent: 
w3m/0.5.3+git20230121\r\nAccept: text/html, text/*;q=0.5, image/*, 
application/*, message/*, audio/*\r\nAccept-Encoding: gzip, compress, bzip, 
bzip2, deflate, br\r\nAccept-Language: en;q=1.0\r\nHost: 
nabijaczleweli:8000\r\nReferer: http://nabijaczleweli:8000/\r\nContent-Type: 
application/x-www-form-urlencoded\r\nContent-Length: 
50\r\n\r\nvendor=http&archive=yes-i-really-want-one&type=tar\r\n", 403) = 403
the correct request has
        Content-Type: text/plain
with body
        vendor=http\r
        archive=yes-i-really-want-one\r
        type=tar\r
cf.
        
https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#submit-body
        
https://html.spec.whatwg.org/multipage/form-control-infrastructure.html#text/plain-encoding-algorithm

Best,

-- System Information:
Debian Release: 12.11
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 
'stable-debug'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.1.0-35-amd64 (SMP w/24 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_FIRMWARE_WORKAROUND, 
TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_GB:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages w3m depends on:
ii  libc6      2.36-9+deb12u10
ii  libgc1     1:8.2.2-3
ii  libgpm2    1.20.7-10+b1
ii  libssl3    3.0.16-1~deb12u1
ii  libtinfo6  6.4+20231121-1
ii  zlib1g     1:1.2.13.dfsg-1

Versions of packages w3m recommends:
ii  ca-certificates  20230311

Versions of packages w3m suggests:
ii  brotli          1.0.9-2+b6
ii  bzip2           1.0.8-5+b1
pn  cmigemo         <none>
pn  compface        <none>
ii  curl            7.88.1-10+deb12u12
pn  dict            <none>
pn  dict-wn         <none>
pn  dictd           <none>
pn  libsixel-bin    <none>
ii  mailcap         3.70+nmu1
ii  man-db          2.11.2-2
ii  media-types     10.0.0
ii  sensible-utils  0.0.17+nmu1
pn  w3m-el          <none>
pn  w3m-img         <none>
ii  wget            1.21.3-1+deb12u1
ii  xdg-utils       1.1.3-4.1
pn  xsel            <none>

-- no debconf information

Attachment: signature.asc
Description: PGP signature

Reply via email to