[Pidgin] #16391: URI escape breaks IPv6 links

Pidgin trac at pidgin.im
Fri Oct 3 13:08:13 EDT 2014


#16391: URI escape breaks IPv6 links
---------------------+---------------------------------------
 Reporter:  cyisfor  |      Owner:  EionRobb
     Type:  patch    |     Status:  new
Milestone:  2.10.10  |  Component:  unclassified
  Version:  2.10.9   |   Keywords:  uri libpurple ipv6 escape
---------------------+---------------------------------------
 The recent method added to escape URIs before spawning them to try to
 avoid meta-characters like $() that some shells might interpret did not
 include [] in the list of allowed characters. As in IPv6 URLs the host
 address is surrounded in square brackets, those are escaped in the URL
 that is presented to the browser.

 Unfortunately the specification for http: URLs says that brackets in the
 host are allowed and not escaped, while they are escaped in the path. In
 any case, escaping them in the host field causes firefox to open a window,
 then just forget about the URL for some reason. (It should attempt to look
 up the name %5B123:4567:89a::::%5D and announce that hostname does not
 exist.)

 An easy fix is to just allow [] characters to be unescaped. If they're in
 the path they'll probably be escaped anyway, and I don't think they'll
 trigger any shell activity.

--
Ticket URL: <https://developer.pidgin.im/ticket/16391>
Pidgin <https://pidgin.im>
Pidgin


More information about the Tracker mailing list