305175 - URL mal formed

Status: RESOLVED INVALID

(Firefox :: Security, defect)

Description

[Edu]

User-Agent:       Mozilla/4.0 (compatible; MSIE 6.0; Windows 98)
Build Identifier: Mozilla/5.0 (Windows; U; Win98; es-ES; rv:1.7.6) Gecko/20050303 Firefox/1.0.1

If you write a malformed URL, the image paths become wrong, and also 
javascripts ... This error occurs in Explorer too, maybe it's a webserver bug!  

This error appears when the url doesn't have GET parameters

Reproducible: Always

Steps to Reproduce:
1. Write a URL in direction bar. i.e http://www.chefuri.com/indexe.php is a 
normal URL, but if you write http://www.chefuri.com/indexe.php/hello the URL 
relative is broken. It's possible use a ../  i.e: 
http://www.chefuri.com/indexe.php/../hello


Please do not crash my personal page :D

Comment 1

[Edu]

If you go to a site containing frames, this frames are reloaded in a infinite 
loop, for example phpmyadmin

http://www.[yourwebsite].com/phpmyadmin/index.php/hello

this mistake can do down the server

Comment 2

[Jesse Ruderman]

If your site responds to http://www.chefuri.com/indexe.php/hello with relative
URLs that don't make sense from that URL, then your site is broken.