Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-5109

The application/x-www-form-urlencoded reader for objects and properties is broken

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Major
    • 2.3 RC1, 2.2.5, 2.4 M1
    • 2.3 M2
    • REST
    • None
    • Unknown

    Description

      The application/x-www-form-urlencoded reader for objects and properties has two way for decoding the entity body:

      1) If it has been invalidated by some filter it uses the HttpServletRequest.getParameter() method for retrieve the parameter values
      2) If it is still valid, it parses it using RESTlet utilities.

      In previous versions, the entity body was always invalidated by some filter and the alternative 2) was never executed, hence tested.

      In this alternative, due to a cut&paste error, the HttpServletRequest.getParameter() was used as well, always returning NULL. Moreover, due to an oversight, the property's prefix is not stripped giving property names which actually don't exist in the object.

      These bugs affected POSTing and PUTting application/x-www-form-urlencoded representations the Objects and Property resources.

      Attachments

        Activity

          People

            fmancinelli Fabio Mancinelli
            fmancinelli Fabio Mancinelli
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: