Re: encodings getting decoded...

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



For safety's sake, I generally restrict URLs to numbers, letters, underscores, and dashes. Remove apostrophes and quotes, replace any other characters with underscores, and compress consecutive underscores. Lowercasing everything is not a bad idea either.

So http://test.com/Testfile_"Test's".htm would become http://test.com/testfile_tests.htm

Your implementation may vary, but explicitly allowing characters generally works better than explicitly disallowing.

On 14-Nov-08, at 12:45 PM, Rick Bragg wrote:

I'm using the latest FireFox on Linux. I am building a web application
where these URL's are created dynamically based on a users input in a
"title" field.  I am filtering their input and encoding it, I guess it
would be best to just delete them with the filter.  Is there a list of
all these characters somewhere that I can look at do build my filter?

Thanks!
Rick


On Fri, 2008-11-14 at 11:37 -0800, Dan Udey wrote:
Sounds like a browser issue. My browser (Safari) doesn't do that. Are
you using Internet Explorer? Try another browser.

Also, it's bad practice to have non-URL-safe characters in the URL,
encoded or not.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx


[Index of Archives]     [Open SSH Users]     [Linux ACPI]     [Linux Kernel]     [Linux Laptop]     [Kernel Newbies]     [Security]     [Netfilter]     [Bugtraq]     [Squid]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Samba]     [Video 4 Linux]     [Device Mapper]

  Powered by Linux