| 2012-12-11 14:53:34 |
Zane Bitter |
description |
An unfortunate feature of WSGI (inherited from CGI) is that the path we are passed for an HTTP request has already been unquoted, thus turning all instances of '%2A' back into a '/' that is indistinguishable from an actual path component. Since there is no way to get the original, unmolested data, there is therefore no way to sensibly handle names that have slashes in them in the ReST API. So we should disallow such names in the engine. |
An unfortunate feature of WSGI (inherited from CGI) is that the path we are passed for an HTTP request has already been unquoted, thus turning all instances of '%2F' back into a '/' that is indistinguishable from an actual path component. Since there is no way to get the original, unmolested data, there is therefore no way to sensibly handle names that have slashes in them in the ReST API. So we should disallow such names in the engine. |
|
