673924 - %7B in an URL is converted to { in the URL bar

Status: RESOLVED WORKSFORME

(Firefox :: Address Bar, defect)

Description

[Steve Klabnik]

User Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_6_8) AppleWebKit/535.1 (KHTML, like Gecko) Chrome/13.0.782.55 Safari/535.1

Steps to reproduce:

My web application has URLs that contain { in GET parameters. Being that they're unsafe, I properly escape them as %7B when creating links to parts of my app.


Actual results:

Firefox changes this in the location bar to be an actual {.


Expected results:

It should remain a %7B. Because it's a {, I get a "Bad URI" error when copy/pasting the URL or refreshing.

Comment 1

[Steve Klabnik]

One extra bit of information: apparently, certain web servers are more strict about this than others. This is a JRuby on Rails application, and WEBrick complains about the URI, but Tomcat apparently converts or something, because it doesn't break.

Firefox. is still sending in a bad URI, though, my server logs show literal {s.

Also, this behavior happens in Chrome as well, but not Safari.

Comment 2

[Matthias Versen [:Matti]]

That the URL Bar unescapes URL's is by design but the actual request is always done with escaped URLs. I tested Seamonkey trunk and Firefox5 and they work as they should.

Entering "http://example.org/%7B" is converted to "http://example.org/{" in the URL bar but the http request is "GET /%7B HTTP/1.1" (verified with wireshark).

Comment 3

[Tim (fmdeveloper)]

Closing per comment 2

Steve -> If you can still reproduce can you attach a sample log and if possible a fiddler or wireshark log

Comment 4

[Steve Klabnik]

I will add a log once family stuff is done for the holidays.