Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-8179

WPA4 for IIS does not handle space character in request url

    XMLWordPrintable

    Details

    • Rank:
      1|hzqur3:

      Description

      Create a resource on IIS (a file or folder) with a space character in it.
      Set debug logging to All.
      Open that resource through the browser (log excerpt):

      ::
      setup_request_data(): original request url:
      https://host:443/documents/space character.html
      ::

      (note that the browser sends in that resource in the following form:
      https://host:443/documents/space%20character.html)

      further in a call agent truncates the requests url to:

      :::
      complete: https://host:443/documents/space
      ::

      which depending on a policy rules might end up in denied access to the resource.

      When fixed there should be no truncation, only the expected encoding of space characters to %20.

        Attachments

          Activity

            People

            mareks Mareks Malnacs
            mareks Mareks Malnacs
            Filip Kubáň [X] Filip Kubáň [X] (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved: