Here is the patch for Tomcat 3.2.x, turned out to be fairly straightforward,
but again there may be a better place to put this fix and there may be
security issues I hadn't considered...Thanks again!
David Weinrich
--- FileUtil.java Thu Dec 28 19:19:43 2000
+++ FileUtilEd.java Thu Dec
---snip---
> ...but there might be security/implementation
> issues that I missed.
---snip---
Oops! Found one big issue right after I sent off the patch. Patch now checks
for non-hex-character-strings in the encoding, and returns null if present
( similar to what happens if a control character is
Hello again!
I have run into something of an issue with tomcat 3.2.1 and 4.0 and
urls/filenames that include funky/reserved characters ( the most
common/troublesome being # so far ). To fix this I read rfc1738
ftp://ftp.isi.edu/in-notes/rfc1738.txt on the 'proper' way to handle these
issues and
