Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[HttpFoundation] Allow redirecting to URLs that contain a semicolon #34366

Merged
merged 1 commit into from Nov 17, 2019

Conversation

JayBizzle
Copy link
Contributor

@JayBizzle JayBizzle commented Nov 13, 2019

Q A
Branch? 4.3
Bug fix? no
New feature? no
Deprecations? no
License MIT

URLs that contain a semicolon cannot be redirected to at least in MS Edge and IE10.

Take the following example...

# https://ad.doubleclick.net/ddm/clk/450721234;254801234;l

// After redirect...
# https://ad.doubleclick.net/ddm/clk/450721234

Wrapping the URL in single quotes fixes the issue (related reading)

@nicolas-grekas
Copy link
Member

Thanks, that's for branch 3.4 I suppose.
Can you please have a look at failing tests?

@nicolas-grekas nicolas-grekas changed the title Allow redirecting to URLs that contain a semicolon [HttpFoundation] Allow redirecting to URLs that contain a semicolon Nov 17, 2019
@fabpot
Copy link
Member

fabpot commented Nov 17, 2019

Thank you @JayBizzle.

fabpot added a commit that referenced this pull request Nov 17, 2019
…semicolon (JayBizzle)

This PR was merged into the 3.4 branch.

Discussion
----------

[HttpFoundation] Allow redirecting to URLs that contain a semicolon

| Q             | A
| ------------- | ---
| Branch?       | 4.3
| Bug fix?      | no
| New feature?  | no
| Deprecations? | no
| License       | MIT

URLs that contain a semicolon cannot be redirected to at least in MS Edge and IE10.

Take the following example...

```
# https://ad.doubleclick.net/ddm/clk/450721234;254801234;l

// After redirect...
# https://ad.doubleclick.net/ddm/clk/450721234
```

Wrapping the URL in single quotes fixes the issue ([related reading](https://www.w3.org/TR/WCAG20-TECHS/H76.html))

Commits
-------

bd0637e [HttpFoundation] Allow redirecting to URLs that contain a semicolon
@fabpot fabpot merged commit bd0637e into symfony:3.4 Nov 17, 2019
This was referenced Nov 17, 2019
This was referenced Dec 1, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants