Michael Brown
e55ec845e6
[uri] Apply URI decoding for all parsed URIs
...
The various early-exit paths in parse_uri() accidentally bypass the
URI field decoding. The result is that opaque or relative URIs do not
undergo URI field decoding, resulting in double-encoding when the URIs
are subsequently used. For example:
#!ipxe
set mac ${macstring}
imgfetch /boot/by-mac/${mac:uristring}
would result in an HTTP GET such as
GET /boot/by-mac/00%253A0c%253A29%253Ac5%253A39%253Aa1 HTTP/1.1
rather than the expected
GET /boot/by-mac/00%3A0c%3A29%3Ac5%3A39%3Aa1 HTTP/1.1
Fix by ensuring that URI decoding is always applied regardless of the
URI format.
Reported-by: Andrew Widdersheim <awiddersheim@inetu.net >
Signed-off-by: Michael Brown <mcb30@ipxe.org >
2016-01-26 16:16:13 +00:00
..
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-04-24 14:41:32 +01:00
2015-04-24 15:32:04 +01:00
2015-03-02 14:17:31 +00:00
2015-03-02 16:35:29 +00:00
2015-03-02 14:17:31 +00:00
2015-08-16 00:48:34 +01:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 16:35:37 +00:00
2015-03-02 16:35:29 +00:00
2015-03-02 14:17:31 +00:00
2016-01-12 15:39:14 +00:00
2015-03-02 14:17:31 +00:00
2016-01-09 13:30:42 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:50:42 +00:00
2015-07-22 21:17:47 +01:00
2015-10-14 22:16:45 +01:00
2015-03-05 11:40:13 +00:00
2015-06-29 16:44:16 +01:00
2015-03-05 11:40:13 +00:00
2015-03-05 11:40:13 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:50:42 +00:00
2011-06-28 14:45:11 +01:00
2005-03-08 18:53:11 +00:00
2016-01-09 13:22:37 +00:00
2015-03-02 14:17:31 +00:00
2015-07-22 21:17:47 +01:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-07-28 16:59:11 +01:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-08-21 15:46:28 +01:00
2015-09-29 01:07:08 +01:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2010-04-19 23:43:39 +01:00
2015-03-02 14:50:42 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2011-03-09 20:09:26 +00:00
2012-03-26 14:43:52 +01:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-07-28 16:37:00 +01:00
2015-03-02 16:35:29 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 16:35:29 +00:00
2015-03-02 16:35:29 +00:00
2015-06-29 11:04:10 +01:00
2015-08-25 13:31:46 +01:00
2015-03-02 14:17:31 +00:00
2015-02-16 16:25:20 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 16:35:29 +00:00
2015-07-31 11:19:19 +01:00
2016-01-26 16:16:13 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 14:17:31 +00:00
2015-03-02 16:35:29 +00:00
2015-03-02 14:17:31 +00:00
2015-07-22 21:17:47 +01:00
2015-07-27 15:21:17 +01:00