Article:
 |
|
A Canary Trap for URI Escaping
|
| Subject: |
|
Sounds like a work-around |
| Date: |
|
2006-05-29 13:50:49 |
| From: |
|
BasSchulte
|
|
|
|
Hi,
I may be wrong but this raises a big, BIG, red flag with me.
Sorta like: hey, I got this string from somewhere, let's try decoding it until I think it looks right (I've been through some utf-8 challenges lately...).
Unless you're dealing with idiots that supply you with data they say is in a given encoding that are plain wrong, just make sure you know what you're doing.
What are they sending me (tcpdump is your friend)? How is it encoded? How do I decode it to something my environment handles?
It all sounds so work-around-ish that it hurts.
But hey, if it works (good enough) for you, go ahead ;)
Cheers,
Bas.
|
Showing messages 1 through 1 of 1.
You are missing the point -- this is about escaping, not encoding. Browsers and multiple redirects will often re-escape things in annoying and unexpected ways.
-R