https://bz.apache.org/bugzilla/show_bug.cgi?id=62459

--- Comment #11 from Rainer Jung <rainer.j...@kippdata.de> ---
Hi Guido,

I didn't have the time to follow the discussoin in detail, but would using

AllowEncodedSlashes NoDecode

help in any way?

I think we as just one module can not simply define our special sequence as
e,.g. %%. But if you want to do experiments, you can check for the current
AllowEncodedSlashes settings like this:

...
#include http_core.h
...

core_dir_config *cfg;
cfg = (core_dir_config *)ap_get_core_module_config(r->per_dir_config);

if (!cfg->allow_encoded_slashes) {
    /* AllowEncodedSlashes Off */
} else if (!cfg->decode_encoded_slashes) {
    /* AllowEncodedSlashes Nodecode */
} else {
    /* AllowEncodedSlashes On */
}

The snippet does not work in jk_canonenc, because that function is a standalone
function called by Apache httpd and by IIS, so it does not know about Apache
specifics. But you can use it for example in mod_jk.c before calling
jk_canonenc there.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to