]> git.ipfire.org Git - thirdparty/apache/httpd.git/commitdiff
PR66563: escaping of url releated server vars
authorEric Covener <covener@apache.org>
Tue, 11 Apr 2023 21:36:55 +0000 (21:36 +0000)
committerEric Covener <covener@apache.org>
Tue, 11 Apr 2023 21:36:55 +0000 (21:36 +0000)
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1909073 13f79535-47bb-0310-9956-ffa450edef68

docs/manual/mod/mod_rewrite.xml
docs/manual/rewrite/flags.xml

index dff26d97c2a4aa7423a3031bc5d502e7107392e2..793d75666d962ef2d66ff521a8542c8724bd6f94 100644 (file)
@@ -661,7 +661,11 @@ AliasMatch "^/myapp" "/opt/myapp-1.2.3"
                   <dd>The path component of the requested URI,
                   such as "/index.html".  This notably excludes the
                   query string which is available as its own variable
-                  named <code>QUERY_STRING</code>.</dd>
+                  named <code>QUERY_STRING</code>. The value returned for
+                  both <code>REQUEST_URI</code> and <code>QUERY_STRING</code>
+                  has already been %-decoded, to re-encoded it pass it through
+                  the "escape" <a href="#mapfunc">mapping-function</a>.
+                  </dd>
 
                   <dt><code>THE_REQUEST</code></dt>
 
@@ -1333,7 +1337,8 @@ cannot use <code>$N</code> in the substitution string!
     <tr>
         <td>B</td>
         <td>Escape non-alphanumeric characters in backreferences <em>before</em>
-        applying the transformation. <em><a
+        applying the transformation. For similar escaping of server-variables, see
+        the "escape" <a href="#mapfunc">mapping-function</a>.<em><a
         href="../rewrite/flags.html#flag_b">details ...</a></em></td>
     </tr>
     <tr>
index ea8b0ce3ad2ce9f44a0a5cffd63dc529021b9043..c61d4229c3a160b520044c7e867d51946453c71f 100644 (file)
@@ -76,6 +76,10 @@ so backreferences are unescaped at the time they are applied.
 Using the B flag, non-alphanumeric characters in backreferences
 will be escaped. For example, consider the rule:</p>
 
+<p>For similar escaping of server-variables, see
+    the "escape" <a href="#mapfunc">mapping-function</a></p>
+
+
 <highlight language="config">
 RewriteRule "^search/(.*)$" "/search.php?term=$1"
 </highlight>