Re: Form Variable Parsing Bug

This looks like a good enhancement.  Do you know of any HTTP server
implementations that actually use ';' as a separator? I don't think
I'm aware of any.

Stephen

On Sun, Mar 4, 2012 at 12:15 AM, Michael Richards <[email protected]> wrote:
> I googled this but was surprised to find no comments or fixes. Diff is
> at the bottom.
>
> W3C says the following at
> http://www.w3.org/TR/1999/REC-html401-19991224/appendix/notes.html#h-B.2.2
> We recommend that HTTP server implementors, and in particular, CGI
> implementors support the use of ";" in place of "&" to save authors
> the trouble of escaping "&" characters in this manner.
>
> The fix below is very simple. It does permit then separation using
> either a ; or a & which in my mind isn't very neat but proper URI
> encoding requires that any form names or values containing ';' or '&'
> be encoded to their % equivalent anyway.
>
>
> --- Cgicc.cpp =A0 2012-03-04 00:03:35.000000000 -0500
> +++ Cgicc.cpp.bak =A0 =A0 =A0 2012-03-04 00:02:11.000000000 -0500
> @@ -365,12 +365,12 @@
>
> =A0 =A0 =A0 // Decode the name
> =A0 =A0 =A0 name =3D form_urldecode(data.substr(oldPos, pos - oldPos));
> =A0 =A0 =A0 oldPos =3D ++pos;
>
> - =A0 =A0 =A0// Find the '&' OR ';' separating subsequent name/value pairs
> - =A0 =A0 =A0pos =3D data.find_first_of(";&", oldPos);
> + =A0 =A0 =A0// Find the '&' separating subsequent name/value pairs
> + =A0 =A0 =A0pos =3D data.find_first_of('&', oldPos);
>
> =A0 =A0 =A0 // Even if an '&' wasn't found the rest of the string is a va=
lue
> =A0 =A0 =A0 value =3D form_urldecode(data.substr(oldPos, pos - oldPos));
>
> =A0 =A0 =A0 // Store the pair
>
> _______________________________________________
> bug-cgicc mailing list
> [email protected]
> https://lists.gnu.org/mailman/listinfo/bug-cgicc