APAR status
Closed as program error.
Error description
1. a URL consists of multiple parts as described in appendix A
in RFC 2396, where the BNF for a URI is given. Each of the
individual parts is subject to the URL encoding algorithm (
represented as the entities
2. initially a URL part is a character stream. By definition
a character can be ANY character.
3. the character stream is transformed to a byte stream.
4. the byte stream is converted back to a character stream.
The rule for this conversion is that each byte that is not one
Local fix
The rule for this conversion is that each byte that is not one
of the 60 bytes defined in RFC 2396 (the 'mark' entity in the
BNF) is converted to the triple '%'HH, where HH is the ASCII
representation of the hexvalue of the byte in question (the
'encoded' entity in the BNF) So the algorithm for decoding
the URL at the server is to first split it into its tokens
and the URL-unescape these tokens. Currently the appserver
first unescapes the URL and then tokenizes it.
Problem summary
****************************************************************
* USERS AFFECTED: All users are affected. *
****************************************************************
* PROBLEM DESCRIPTION: Example: given the url *
* http://myserver/%3f/Carsten?name=value *
* If we decode it first and then *
* tokenize, it looks like this: -> *
* decoding yields *
* http://myserver/?/Carsten?name=value *
* the query string thus is *
* /Carsten?name=value . *
****************************************************************
* RECOMMENDATION: *
****************************************************************
The Http Transport code is tokenizing first and then
decoding, yielding a query string of name=value
Problem conclusion
Decode the URL before tokenizing.
Temporary fix Comments
APAR information |
APAR number |
PQ80244 |
Reported component name |
WAS BASE 5.0 |
Reported component ID |
5630A3600 |
Reported release |
00W |
Status |
CLOSED PER |
PE |
NoPE |
HIPER |
NoHIPER |
Special Attention |
NoSpecatt |
Submitted date |
2003-10-30 |
Closed date |
2003-11-17 |
Last modified date |
2003-11-17 |
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Modules/Macros
Publications Referenced
Applicable component levels |
R003 PSY |
UP |
R00A PSY |
UP |
R00H PSY |
UP |
R00I PSY |
UP |
R00P PSY |
UP |
R00S PSY |
UP |
R00W PSY |
UP |
|