jdc8 / wub

Automatically exported from code.google.com/p/wub
0 stars 0 forks source link

Percent signs are not escaped in links from directory listings #22

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Put a file named "15%20Y.txt in a directory associated with a File domain 
(e.g. "/dir/").
2. View the directory listing (i.e. "/dir/"). 
3. Click on the "15%20Y.txt" link.

What is the expected output? What do you see instead?

  I expect the contents of the file. I see an error message saying the file whose name I just clicked on doesn't exist. The name has had the percent sign and following digits replaced with the character encoded by the value of those digits.

What version of the product are you using? On what operating system?

  Wub-4.0.0 on MS Windows XP Professional

Please provide any additional information below.

  The URL decoding evidently interprets escape sequences properly. It seems that the URL link in the directory display merely does not escape characters that it needs to. Percent signs in the link are the only non-cosmetic problem I've seen, but HTML entities in the file name (e.g. é.txt) are understandably rendered as the corresponding character by the browser. Perhaps they should be "sanitized" ("armoured"?) for display.

Original issue reported on code.google.com by Qunc...@gmail.com on 19 Aug 2010 at 1:45