Developer tool has incorrect space handling for parameters

UNCONFIRMED
Unassigned

Status

()

Firefox
Developer Tools: Netmonitor
P3
normal
UNCONFIRMED
a year ago
11 months ago

People

(Reporter: 田海军, Unassigned, NeedInfo)

Tracking

Firefox Tracking Flags

(Not tracked)

Details

Attachments

(2 attachments)

(Reporter)

Description

a year ago
What did you do?
================
1. 使用火狐浏览器查看访问网站时请求的参数。
2.
3. 

What happened?
==============
请求的参数与真实数据不一致,导致使用程序模拟时得到错误数据。
参数是在网页里可以提取的。如:
<form id="topForm" action="" method="post">
<input type="hidden" id="aiccipsUrl" value="http://gsxt.gdgs.gov.cn/aiccips/">
<input type="hidden" id="entNo" name="entNo" value="8dfcfddb-011e-1000-e002-8f300a080114">
<input type="hidden" id="entType" name="entType" value="1100  ">
<input type="hidden" id="regOrg" name="regOrg" value="441624">
</form>

但开发者插件显示如下:
pageNo:"2"
entNo:"8dfcfddb-011e-1000-e002-8f300a080114"
regOrg:"441624"
entType:"1100++"

What should have happened?
==========================
应该确保参数是一致的。entType 应该是显示为 entType:"1100",因为真实发送的请求参数就是 1100.

Is there anything else we should know?
======================================
在表单里 <input type="hidden" id="entType" name="entType" value="1100  ">后面多了两个空格。是不是在处理空格里出现了错误。
(Reporter)

Updated

a year ago
Group: websites-security
Google translate says:

Title: Developer Tools query parameters are inconsistent with the actual request parameters. (Edit)

What did you do?
================
1. parameters using the Firefox browser to view the site access request.
2.
3.

What happened?
==============
Parameter data request is inconsistent with the real, it can lead to incorrect data when using the simulation program.
Parameters are on the page where you can extract. Such as:
<Form id = "topForm" action = "" method = "post">
<Input type = "hidden" id = "aiccipsUrl" value = "http://gsxt.gdgs.gov.cn/aiccips/">
<Input type = "hidden" id = "entNo" name = "entNo" value = "8dfcfddb-011e-1000-e002-8f300a080114">
<Input type = "hidden" id = "entType" name = "entType" value = "1100">
<Input type = "hidden" id = "regOrg" name = "regOrg" value = "441624">
</ Form>

But the developer plug-ins appear as follows:
pageNo: "2"
entNo: "8dfcfddb-011e-1000-e002-8f300a080114"
regOrg: "441624"
entType: "1100 ++"

What should have happened?
==========================
It should ensure that the parameters are consistent. entType should be displayed as entType: "1100", because the request is sent real parameter 1100.

Is there anything else we should know?
======================================
In the form <input type = "hidden" id = "entType" name = "entType" value = "1100"> after more than two spaces. Gerry is not handling null error occurred.
Group: websites-security → firefox-core-security
Component: User management → Untriaged
Product: Mozilla Developer Network → Firefox
Not a security bug.

Can you provide a live testcase that reproduces the problem you're seeing here?
Group: firefox-core-security
Component: Untriaged → Developer Tools: Netmonitor
Flags: needinfo?(forget_tian)
Whiteboard: [specification][type:bug]
In order to fix this, we need clear steps to reproduce the problem on our machines.

Can you please provide a simple test case that we could use?
Otherwise we'll be forced to close this report :-(

Thanks,
Honza
Priority: -- → P5

Comment 4

11 months ago
Created attachment 8811802 [details]
Screenshot for Fiddler

I did not see the reporter said, the real transmission of the parameters have this spaces with ++. Maybe your handler has trim() for parameters.

Comment 5

11 months ago
Created attachment 8811803 [details]
testcase for send

Updated

11 months ago
Priority: P5 → --
Summary: 开发者工具查询请求参数与真实请求参数不一致。 → Developer tool has incorrect space handling for parameters
Thanks!

STR:
1) Load the attached page
2) Open DevTools (F12) and select the Network panel
3) Click the Submit button on the page
4) Select the first request in the Network panel (http://gsxt.gdgs.gov.cn/aiccips/)
5) Check out the 'Params' side panel, 'entType': "1100++", spaces are replaced by '+' character => BUG

Honza
Has STR: --- → yes
Priority: -- → P3
You need to log in before you can comment on or make changes to this bug.