changeset 8210:4ed886dc2558

fix(web): issue2551381 - roundup-server parses multiple '?" incorrectly. Change 'rfind()' to 'find()' to locate the first unencoded/unescaped '?' in a URL. End the path component of the url at that point. This matches https://www.rfc-editor.org/rfc/rfc3986#section-3.4.
author John Rouillard <rouilj@ieee.org>
date Sun, 15 Dec 2024 00:36:19 -0500
parents 9d2ad7386627
children 513942bca8d2
files roundup/scripts/roundup_server.py
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/roundup/scripts/roundup_server.py	Wed Dec 11 16:24:16 2024 -0500
+++ b/roundup/scripts/roundup_server.py	Sun Dec 15 00:36:19 2024 -0500
@@ -398,7 +398,7 @@
 
             return
 
-        i = self.path.rfind('?')
+        i = self.path.find('?')
         if i >= 0:
             # rest starts with /, query is without ?
             rest, query = self.path[:i], self.path[i+1:]

Roundup Issue Tracker: http://roundup-tracker.org/