[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: r3013 - in /trunk/pts: apache.conf www/cgi-bin/pts.cgi www/web/common/index.html www/web/common/pts.js www/xsl/pts.xsl



On Mon, 27 May 2013, pabs@users.alioth.debian.org wrote:
> -RewriteCond %{QUERY_STRING} ^src=\s*lib([^\s])([^\s]+)\s*$
> +RewriteCond %{QUERY_STRING} ^src=.*?lib([-a-zA-Z0-9.]|%2B)((?:[-a-zA-Z0-9.]|%2B)+).*$

Strictly speaking, uppercases are also forbidden (at least by dpkg) and
the first character may not be anything else than alphanumeric:

    $name =~ m/[^-+.0-9a-z]/o &&
        return sprintf(_g("character '%s' not allowed"), $&);
    $name =~ m/^[0-9a-z]/o ||
        return _g("must start with an alphanumeric character");

Also, are you sure that we always get %2B for "+" ? Why not include the "+" in
the character range for extra safety ?

Cheers,
-- 
Raphaël Hertzog ◈ Debian Developer

Get the Debian Administrator's Handbook:
→ http://debian-handbook.info/get/


Reply to: