Ugh, I have an issue.

It has come to my attention that the URL validation does not conform to 
RFC1738 (section 2.2 is the most relevant).  This is fine for the 
schema://host/application/controller/function part of the URL, but it 
causes problems in such circumstances that I ran into today.  Here are 
the details:

I made a PDF file pass-through that I access like : 
/init/default/pdfpass/dir/PDF_FILENAME.pdf

I ran into the problem of sometimes a request comes in that looks like: 
/init/default/pdfpass/dir/PDF'FILENAME.pdf  (notice the apostrophe)

This doesn't play well with the URL validation regexp from main.py line 
39.  I would like to be able to use normal URL characters in my function 
arguments.

For those with not enough time/patience to read an RFC, normal path 
characters are: letters, numbers, and *$ - _ . + ! * ' ( ) ,*  This does 
not include the special URL path characters: */ @ ? : = & ;*

Thoughts?  Can we include these characters without compromising security?


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"web2py Web Framework" group.
To post to this group, send email to web2py@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/web2py?hl=en
-~----------~----~----~----~------~----~------~--~---

begin:vcard
fn:Timothy Farrell
n:Farrell;Timothy
org:Statewide General Insurance Agency;IT
adr:;;4501 East 31st Street;Tulsa;OK;74135;US
email;internet:[EMAIL PROTECTED]
title:Computer Guy
tel;work:(918)492-1446
url:www.swgen.com
version:2.1
end:vcard

Reply via email to