Multipart POST: Form variable encoding
Don't use quotation marks in your form variable names.
The input:
<input type=hidden name='the"hidden"value<>' value="2!!!%eeeeee">
Gives the output:
Firefox 3.5.6:
Content-Disposition: form-data; name="the"hidden"value<>"
Opera 10.50 alpha 1:
Content-Disposition: form-data; name="the\"hidden\"value<>"
Chrome 4.0.249.43:
Content-Disposition: form-data; name="the%22hidden%22value<>"
The input:
<input type=hidden name='the"hidden"value<>' value="2!!!%eeeeee">
Gives the output:
Firefox 3.5.6:
Content-Disposition: form-data; name="the"hidden"value<>"
Opera 10.50 alpha 1:
Content-Disposition: form-data; name="the\"hidden\"value<>"
Chrome 4.0.249.43:
Content-Disposition: form-data; name="the%22hidden%22value<>"
Labels: programming

0 Comments:
Post a Comment
<< Home