This repository was archived by the owner on Apr 22, 2023. It is now read-only.
This repository was archived by the owner on Apr 22, 2023. It is now read-only.
Faulty browser url encoding emulation for slash flipping #8458
Description
On line 116 in lib/url.js slash flipping occurs in the entire url excluding the hash. Proper browser emulation would include the query string in flip exclusion.
http://www.foo.com/foo\bar\?spla\t#fu\nk
should be translated to
http://www.foo.com/foo/bar/?spla%5Ct#fu%5Cnk
pull request to follow.