CGI::escape does not allow hex values > 0x9F, e.g. %FD
Brought to you by:
wiggins1
Menu
▾
▴
#1 CGI::escape does not allow hex values > 0x9F, e.g. %FD
open
nobody
None
5
2006-01-20
2006-01-20
Anonymous
No
The method CGI::escape() only takes care for
escaped characters upto hex code 0x9F (...%9F...)
because the implementation only checks that the
first character is a digit (0...9).
The method should apply the same check (0..9, A..F)
for the second and the first character to allow
the full range of non-ASCII codes.
A patch for jwcgi/jwcgi/cgi.cpp is appended.
Patch to allow %A0...%FF in CGI::escape() string