PR: 9727
Submitted by: Ville Skytt <ville.skytta iki.fi>
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@655714
13f79535-47bb-0310-9956-
ffa450edef68
Changes with Apache 2.3.0
[ When backported to 2.2.x, remove entry from this file ]
+ *) gen_test_char: add double-quote to the list of T_HTTP_TOKEN_STOP.
+ PR 9727 [Ville Skytt <ville.skytta iki.fi>]
+
*) suexec: When group is given as a numeric gid, validate it by looking up
the actual group name such that the name can be used in log entries.
PR 7862 [<y-koga apache.or.jp>, Leif W <warp-9.9 usa.net>]
flags |= T_OS_ESCAPE_PATH;
}
- /* these are the "tspecials" from RFC2068 */
- if (c && (apr_iscntrl(c) || strchr(" \t()<>@,;:\\/[]?={}", c))) {
+ /* these are the "tspecials" (RFC2068) or "separators" (RFC2616) */
+ if (c && (apr_iscntrl(c) || strchr(" \t()<>@,;:\\\"/[]?={}", c))) {
flags |= T_HTTP_TOKEN_STOP;
}