Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Download links should escape plus sign #166

Closed
ibennetch opened this issue Dec 19, 2023 · 6 comments
Closed

Download links should escape plus sign #166

ibennetch opened this issue Dec 19, 2023 · 6 comments
Assignees

Comments

@ibennetch
Copy link
Member

When generating the links to download a snapshot, such as file phpMyAdmin-6.0+snapshot-all-languages.zip, the plus sign should technically be URL encoded to %2b.

This isn't usually a problem that I've seen, but there is something going on with our CDN that causes downloads to fail verification. Our CDN provider is looking at whether there is something they should do to fix it, but according to (my understanding of) the standards we should also encode the plus sign here.

@ibennetch
Copy link
Member Author

This is directly related to #164.

@ibennetch
Copy link
Member Author

I may be mistaken on this, according to https://stackoverflow.com/a/2678602/2385479 it appears to me the plus sign is literal in a URL except when part of a query string. So I think our code and URL is technically correct.

We are still discussing it with the CDN provider.

@liviuconcioiu
Copy link

According to RFC1738, plus sign is allowed in the URL - https://datatracker.ietf.org/doc/html/rfc1738#section-2.1.
According to RFC1630, plus sign should be encoded if it's in the query string - https://datatracker.ietf.org/doc/html/rfc1630

So, clearly the issue is on their side.

@MauricioFauth
Copy link
Member

@ibennetch Could we encoded the URL to encode the plus sign to %2B as a temporary fix?

@williamdes
Copy link
Member

So, clearly the issue is on their side.

Thank you for the RFC links.

I sent an email expressing our dissatisfaction about they reply.

@williamdes
Copy link
Member

@ibennetch Could we encoded the URL to encode the plus sign to %2B as a temporary fix?

Done

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants