On Thursday, December 1, 2011, Tom Lane wrote:

> d.reri...@healthcareoss.com <javascript:;> writes:
> > Simply set a varchar field in your db to the following string:
> > !&quot;#$%&#39;()*+,-/:;=?@[\]^_`{|}~0000&amp;&lt;&gt;
>
> > I know, I know, who would do this, right? Well, its for a certification.
> > The like command works fine up with escapes up to:
> > !&quot;#$%&#39;&#39;()*+,-/:;=?@[%
>
> Doesn't match for me, rather unsurprisingly since this string contains
> two occurrences of "&#39;" not one.
>
> > Notice, I added the % to the end. However, if you go any further - no
> > matches:
> > !&quot;#$%&#39;&#39;()*+,-/:;=?@[\\%
> > Strangely, this works and shouldn&#39;t:
> > !&quot;#$%&#39;&#39;()*+,-/:;=?@[\%
>
> It's hard to tell for sure, since you've presented a garbled
> interpretation of what you did rather than showing us exactly what you
>

A fair amount of that garbling is unfortunately the fault of a bug in the
new website code that applied HTML escapes to plaintext emails, which in
the end caused double escaping. I've just pushed a fix for this, so from
now on bugreports won't do that.




-- 
 Magnus Hagander
 Me: http://www.hagander.net/
 Work: http://www.redpill-linpro.com/

Reply via email to