Welcome Guest, Not a member yet? Register   Sign In
Disallowed characters in URI
#4

(05-29-2024, 06:18 PM)kenjis Wrote: Read https://codeigniter.com/user_guide/gener...characters

That was the first thing I did.

According to that, there are two options.

Option 1. I can turn off the whole check by setting it to '' which is not safe for the whole project.
Option 2. I can add all the characters one can type on the keyboard, which is the same thing as option 1. basically.

There should be a middle ground, where it is possible to disable this for some controllers/methods.
It worked before 4.4.7. Or there was no filtering before that? Or there was this bug for years?
CodeIgniter 3 hasĀ permitted_uri_chars too, which is the same thing, so I assume there was filtering before 4.4.7 and it was not a bug that it worked.

How am I supposed to know all the most common possible characters? For example, I switch between Chinese, Japanese, Korean keyboard layouts all the time. Sometimes I type something, press enter and realize, I did not switch. And these are just the CJK characters.
If someone types a wrong character into a search field, not maliciously, the whole site will crash -> Whoops! page. That is a joke to me. There should be a way to handle this properly.

As I said before. In my opinion the url should not beĀ decoded before the checkDisallowedChars.
Reply


Messages In This Thread
Disallowed characters in URI - by loxia - 05-20-2024, 02:04 PM
RE: Disallowed characters in URI - by loxia - 05-29-2024, 04:38 PM
RE: Disallowed characters in URI - by kenjis - 05-29-2024, 06:18 PM
RE: Disallowed characters in URI - by loxia - 05-29-2024, 07:59 PM
RE: Disallowed characters in URI - by kenjis - 05-29-2024, 09:09 PM
RE: Disallowed characters in URI - by kenjis - 05-29-2024, 09:15 PM
RE: Disallowed characters in URI - by kenjis - 05-29-2024, 08:51 PM
RE: Disallowed characters in URI - by kenjis - 05-29-2024, 09:18 PM
RE: Disallowed characters in URI - by loxia - 05-30-2024, 04:42 AM



Theme © iAndrew 2016 - Forum software by © MyBB