1301618 - Developer tool has incorrect space handling for parameters

Status: RESOLVED INCOMPLETE

(DevTools :: Netmonitor, defect, P3)

Description

[田海军]

What did you do?
================
1. 使用火狐浏览器查看访问网站时请求的参数。
2.
3. 

What happened?
==============
请求的参数与真实数据不一致，导致使用程序模拟时得到错误数据。
参数是在网页里可以提取的。如：
<form id="topForm" action="" method="post">
<input type="hidden" id="aiccipsUrl" value="http://gsxt.gdgs.gov.cn/aiccips/">
<input type="hidden" id="entNo" name="entNo" value="8dfcfddb-011e-1000-e002-8f300a080114">
<input type="hidden" id="entType" name="entType" value="1100  ">
<input type="hidden" id="regOrg" name="regOrg" value="441624">
</form>

但开发者插件显示如下：
pageNo:"2"
entNo:"8dfcfddb-011e-1000-e002-8f300a080114"
regOrg:"441624"
entType:"1100++"

What should have happened?
==========================
应该确保参数是一致的。entType 应该是显示为 entType:"1100",因为真实发送的请求参数就是 1100.

Is there anything else we should know?
======================================
在表单里 <input type="hidden" id="entType" name="entType" value="1100  ">后面多了两个空格。是不是在处理空格里出现了错误。

Comment 1

[John Whitlock [:jwhitlock]]

Google translate says:

Title: Developer Tools query parameters are inconsistent with the actual request parameters. (Edit)

What did you do?
================
1. parameters using the Firefox browser to view the site access request.
2.
3.

What happened?
==============
Parameter data request is inconsistent with the real, it can lead to incorrect data when using the simulation program.
Parameters are on the page where you can extract. Such as:
<Form id = "topForm" action = "" method = "post">
<Input type = "hidden" id = "aiccipsUrl" value = "http://gsxt.gdgs.gov.cn/aiccips/">
<Input type = "hidden" id = "entNo" name = "entNo" value = "8dfcfddb-011e-1000-e002-8f300a080114">
<Input type = "hidden" id = "entType" name = "entType" value = "1100">
<Input type = "hidden" id = "regOrg" name = "regOrg" value = "441624">
</ Form>

But the developer plug-ins appear as follows:
pageNo: "2"
entNo: "8dfcfddb-011e-1000-e002-8f300a080114"
regOrg: "441624"
entType: "1100 ++"

What should have happened?
==========================
It should ensure that the parameters are consistent. entType should be displayed as entType: "1100", because the request is sent real parameter 1100.

Is there anything else we should know?
======================================
In the form <input type = "hidden" id = "entType" name = "entType" value = "1100"> after more than two spaces. Gerry is not handling null error occurred.

Comment 2

[:Gijs (he/him)]

Not a security bug.

Can you provide a live testcase that reproduces the problem you're seeing here?

Comment 3

[Jan Honza Odvarko [:Honza] (always need-info? me)]

In order to fix this, we need clear steps to reproduce the problem on our machines.

Can you please provide a simple test case that we could use?
Otherwise we'll be forced to close this report :-(

Thanks,
Honza

Comment 4

[YF (Yang)]

Attachment: Screenshot for Fiddler

I did not see the reporter said, the real transmission of the parameters have this spaces with ++. Maybe your handler has trim() for parameters.

Comment 5

[YF (Yang)]

Attachment: testcase for send

Comment 6

[Jan Honza Odvarko [:Honza] (always need-info? me)]

Thanks!

STR:
1) Load the attached page
2) Open DevTools (F12) and select the Network panel
3) Click the Submit button on the page
4) Select the first request in the Network panel (http://gsxt.gdgs.gov.cn/aiccips/)
5) Check out the 'Params' side panel, 'entType': "1100++", spaces are replaced by '+' character => BUG

Honza

Comment 7

[Mannilthodi Muhammed ismail]

hi ,
can anybody suggest me how to setup a developer environment , at least name of the tools , i am very much interested to see the coding flow and future i can also become a contributor or supporter ,

i saw some reference for build system , i tried to do that .
but the real thing i am looking for some platform where i can edit the code or debug the code , so kindly requesting any one to help me in this regards..plzz

Platform for :ThunderBird

Comment 8

[BugBot [:suhaib / :marco/ :calixte]]

A needinfo is requested from the reporter, however, the reporter is inactive on Bugzilla. Given that the bug is still UNCONFIRMED, closing the bug as incomplete.

For more information, please visit BugBot documentation.