Project

General

Profile

Bug #24158

rgw: civetweb fails on urls with control characters

Added by Abhishek Lekshmanan over 1 year ago. Updated 12 months ago.

Status:
Resolved
Priority:
Normal
Target version:
-
Start date:
05/17/2018
Due date:
% Done:

0%

Source:
Tags:
Backport:
mimic
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:

Description

Originally reported by Pritha, the new civetweb version is strict on url encoding urls and fails on urls with ctrl characters like {} etc.

1. s3curl.pl --debug --id admin -- -s -v -X POST
"http://localhost:8000/?Action=CreateRole&RoleName=Test&Path=/application_abc/component_xyz/&AssumeRolePolicyDocument=\{\"Version\":\"2012-10-17\",\"Statement\":\[\{\"Effect\":\"Allow\",\"Principal\":\{\"Service\":\[\"ec2.amazonaws.com\"\]\},\"Action\":\[\"sts:AssumeRole\"\]\}\]\}&Version=2010-05-8" 

2. s3curl.pl --debug --id admin -- -s -v -X POST
"http://localhost:8000/?Action=CreateRole&RoleName=S3Access&Path=/application_abc/component_xyz/&AssumeRolePolicyDocument=%7B%22Version%22:%222012-10-17%22,%22Statement%22:\[%7B%22Effect%22:%22Allow%22,%22Principal%22:%7B%22AWS%22:\[%22arn:aws:iam:::user/TESTER%22\]%7D,%22Action%22:\[%22sts:AssumeRole%22\]%7D\]%7D&Version=2010-05-8" 

version 1 fails currently, though it was succeeding earlier


Related issues

Copied to rgw - Backport #26849: mimic: rgw: civetweb fails on urls with control characters Resolved

History

#2 Updated by Orit Wasserman over 1 year ago

  • Status changed from New to Need Review

#3 Updated by Abhishek Lekshmanan over 1 year ago

  • Assignee set to Abhishek Lekshmanan

#4 Updated by Abhishek Lekshmanan about 1 year ago

  • Status changed from Need Review to Pending Backport

#5 Updated by Patrick Donnelly about 1 year ago

  • Copied to Backport #26849: mimic: rgw: civetweb fails on urls with control characters added

#6 Updated by Nathan Cutler 12 months ago

  • Status changed from Pending Backport to Resolved

Also available in: Atom PDF