Red Hat Bugzilla – Bug 233254
mod_proxy not handling percent chars in URLs correctly
Last modified: 2007-11-16 20:14:55 EST
Description of problem:
We are using httpd as a reverse proxy, and have been hit by the bug referenced
within Apache's bugtracker as
Supposedly it was fixed in 2.0.55 back in 2005?
Basically if you are using Apache as a RP, it "double-unescapes"
percent-encodings and ends up with an invalid URL
Version-Release number of selected component (if applicable):
Steps to Reproduce:
1. set up RP section via ProxyPass/ProxyPassReverse e.g
ProxyPass /test http://other.server/test/
2. download "rp.server/test/hel%20l%20o.txt - works (i.e. backend server
3. download rp.srver/test/hel%20l%25o.txt - RP gives 400 error instead of
passing back to backend server
Thanks for the report.
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.