Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-61462

RFC-2396 contradiction: The pipe character "|" is present in alt_token in URI.

    XMLWordPrintable

Details

    Description

      RFC-2396 dictates that the pipe character should be escaped:

      " Other characters are excluded because gateways and other transport
      agents are known to sometimes modify such characters, or they are
      used as delimiters.

      unwise = "

      {" | "}

      " | "|" | "\" | "^" | "[" | "]" | "`"

      Data corresponding to excluded characters must be escaped in order to
      be properly represented within a URI."

      Currently, the atl_token cookie in JIRA has a pipe character separating the server from the license ID and the pipe is not escaped. JIRA uses this token to generate some internal applications links, and this is causing issue with our proxy client (Zuul) which does not allow non-compliant characters through.

      Some affected functions in JIRA include 'Lougout' and 'Assign to me'; basically any link with the atl_token as a query string causes issues.

      The pipe character should be substituted with %7C in the URI.

      Attachments

        Activity

          People

            Unassigned Unassigned
            0c4a1701431c Darren Muldoon
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: