Re: [Chicken-janitors] #1074: uri-generic: percent-encodings in the authority section cause problems (was: [intarweb/spiffy] Connection closed on "Bad Request" with %-character)

[Chicken Trac]

#1074: uri-generic: percent-encodings in the authority section cause problems
----------------------+-----------------------------------------------------
  Reporter:  RvdH     |       Owner:  sjamaan               
      Type:  defect   |      Status:  new                   
  Priority:  major    |   Milestone:  someday               
 Component:  unknown  |     Version:  4.8.x                 
Resolution:           |    Keywords:  bad-request connection
----------------------+-----------------------------------------------------

Comment(by sjamaan):

 Congrats for finding a weird corner case which uri-generic doesn't handle
 :)

 Here's one example: {{{(uri-reference "//%20")}}} causes the error:
 {{{Error: (char-numeric?) bad argument type - not a character: (#\% #\2
 #\0)}}}

 I'll have a look at fixing it.

 Spiffy seems correct, though: it should return a 400 because these weird
 URIs seem to cause the browser to send invalid request lines like {{{GET
 //%20/ HTTP/1.0}}}, which violates the production {{{Request-URI    = "*"
 | absoluteURI | abs_path | authority}}}.  (this is a protocol-relative URI
 reference, which is valid as neither an absolute URI, an abs_path
 component nor an authority)

 You should probably send a bugreport to the vendors of browsers which
 generate these request lines, too ;)

-- 
Ticket URL: <http://bugs.call-cc.org/ticket/1074#comment:1>
Chicken Scheme <http://www.call-with-current-continuation.org/>
Chicken Scheme is a compiler for the Scheme programming language.