Github user michael-o commented on the pull request:
https://github.com/apache/tomcat/commit/eb195bebac8239b994fa921aeedb136a93e4ccaf#commitcomment-29778594
In java/org/apache/catalina/core/ApplicationContext.java:
In java/org/apache/catalina/core/ApplicationContext.java on line 419:
@markt-asf Just stumbled upon this in our code with the target path for
`forward`: `/WEB-INF/fo00_1385+0.jsp`. `URLDecoder` is the wrong class to use
in several spots if your grep for. Javadoc says:
bq. Utility class for HTML form decoding. This class contains static
methods for decoding a String from the `application/x-www-form-urlencoded` MIME
format. This is *not* URI encoding.
What happens in my case is that from `/WEB-INF/fo00_1385+0.jsp`
`/WEB-INF/fo00_1385 0.jsp` arrives at the end. This looks plain wrong to me.
---
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
