Ketil Froyn · @kefir
159 followers · 444 posts · Server mas.to

Many urldecode the url before doing url based routing. So they can't distinguish these URLs:

/users/tom/edit
/users/tom%2Fedit

I'm baffled. Does anyone have a quick reference describing why this is wrong? And as in this discussion, why a HTTP reverse proxy that unescapes URL-encodings before forwarding the request would be breaking all sorts of things, even though it is technically possible?


github.com/encode/starlette/pu

#flask #fastapi #Starlette #framework #frameworks #web #Python

Last updated 1 year ago

Il mago di Oz · @ilmagodioz
414 followers · 165 posts · Server mastodon.uno