intruxxer / zaproxy

Automatically exported from code.google.com/p/zaproxy
0 stars 0 forks source link

URLCanonicalizer.buildCleanedParametersURIRepresentation returns URIs in percent-encoded form and decoded #631

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
Steps to reproduce the issue:
1. Run ZAP and ensure that the spider has the option "Consider both parameter's 
name and value" set;
2. Access a site which contains characters that are outside of the allowed set 
in the path (example: "http://example.com/ç/");
3. Spider the site and note the URIs returned by the 
URLCanonicalizer.buildCleanedParametersURIRepresentation are in percent-encoded 
form (example: "http://example.com/%C3%A7/");
4. Create a new session and change the spider option to "Consider only 
parameter's name";
5. Spider the site and note that the URIs returned are decoded (example: 
"http://example.com/ç/").

Remarks:
The returned URIs should be, always, in the same form (either percent-encoded 
or decoded);

ZAP Version:
Version 2.0.0.

Original issue reported on code.google.com by THC...@gmail.com on 15 Apr 2013 at 4:22

GoogleCodeExporter commented 9 years ago

Original comment by THC...@gmail.com on 2 Jul 2013 at 3:20

GoogleCodeExporter commented 9 years ago
r3262
https://code.google.com/p/zaproxy-test/source/detail?r=87

Original comment by THC...@gmail.com on 2 Jul 2013 at 3:28

GoogleCodeExporter commented 9 years ago

Original comment by psii...@gmail.com on 8 Jul 2013 at 9:08

GoogleCodeExporter commented 9 years ago

Original comment by psii...@gmail.com on 11 Sep 2013 at 5:14