543465 - "Add a keyword for this search" does not properly escape input data.

Status: RESOLVED INCOMPLETE

(Firefox :: General, defect)

Description

[Timothy Green]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 (.NET CLR 3.5.30729)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.2) Gecko/20100115 Firefox/3.6 (.NET CLR 3.5.30729)

I've built a PHP page with a POST form on it with just one text input. Input text is returned to the user with the HTTP header Content-Type: text/plain. If I type into the input field "test this+that", this is what is returned to me. If I add a keyword for the search, and type into the menu bar "keyword test this+that", what is returned to me is just "test this that". The plus sign is lost. Input data has not been properly escaped. (Similarly, input data for GET forms is not properly URL encoded when using a keyword.)

Reproducible: Always

Steps to Reproduce:
1. Add a keyword for a search (not necessarily an actual search).
2. Use the keyword to do a "search" on data containing a plus sign.

Actual Results:  
The plus sign is interpreted as a space.

Expected Results:  
The input data should be properly escaped so the plus sign is preserved as is.

(Incidentally, the equivalent function in Opera works fine.)

Comment 1

[Tyler Downer [He/Him]]

Reporter, are you still seeing this issue with Firefox 3.6.13 or later in safe mode? If not, please close. These links can help you in your testing.
http://support.mozilla.com/kb/Safe+Mode
http://support.mozilla.com/kb/Managing+profiles

You can also try to reproduce in Firefox 4 Beta 8 or later, there are many improvements in the new version, http://www.mozilla.com/en-US/firefox/all-beta.html

Comment 2

[Tyler Downer [He/Him]]

No reply, INCOMPLETE. Please retest with Firefox 3.6.13 or later and a new profile (http://support.mozilla.com/kb/Managing+profiles). If you continue to see this issue with the newest firefox and a new profile, then please comment on this bug.