[ 
https://issues.apache.org/jira/browse/CXF-4207?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13239511#comment-13239511
 ] 

Sergey Beryozkin commented on CXF-4207:
---------------------------------------

I definitely see no 404 in the test demo, indeed, the value (such as 
my%5Cvalue) which is passed to the method gets decoded by default (per the 
spec), that can be blocked by using the @Encoded annotation. 



                
> CXF interprets URL-encoded slashes in PathParam prior to method dispatch
> ------------------------------------------------------------------------
>
>                 Key: CXF-4207
>                 URL: https://issues.apache.org/jira/browse/CXF-4207
>             Project: CXF
>          Issue Type: Bug
>          Components: JAX-RS
>    Affects Versions: 2.4.2, 2.5.3
>            Reporter: Matt Parker
>
> For a method which handles, for example, "@Path(/rest/{value})": if either a 
> forward or backward slash is encoded and provided as part of "{value}", CXF 
> will interpret the encoded slash as a URI separator, rather than as a part of 
> "{value}".
> For example, "GET /rest/my%5Cvalue" will be interpreted as "GET 
> /rest/my\value" prior to dispatching, and will then fail with a 404, rather 
> than passing "my\value" to the method handling the "/rest/{value}" URI.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: 
https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to