[Webkit-unassigned] [Bug 119581] New: URL query string mistakenly decoded when used in <img> tag

Thu Aug 8 10:27:06 PDT 2013

https://bugs.webkit.org/show_bug.cgi?id=119581

           Summary: URL query string mistakenly decoded when used in <img>
                    tag
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: Macintosh
        OS/Version: Mac OS X 10.7
            Status: UNCONFIRMED
          Severity: Blocker
          Priority: P2
         Component: Page Loading
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: cao.yiqun at gmail.com

When the src URL of a <img> tag contains a query string, it is decoded when sent to server.

For example, create this simple HTML file:

<html>
  <body>
    <img src="chart.png?a=%3D"/>
    <script src="a.js?a=%3D"></script>
  </body>
</html>

Serve this file via a web server, like `python -m SimpleHTTPServer  8001`. Visit `localhost:8001`. The server log shows the following:

1.0.0.127.in-addr.arpa - - [08/Aug/2013 10:24:20] "GET / HTTP/1.1" 200 -
1.0.0.127.in-addr.arpa - - [08/Aug/2013 10:24:20] "GET /a.js?a=%3D HTTP/1.1" 200 -
1.0.0.127.in-addr.arpa - - [08/Aug/2013 10:24:20] "GET /chart.png?a== HTTP/1.1" 200 -

Notice that the JavaScript URL was not decoded, which is the correct behavior, but the URL for the <img> tag was mistakenly decoded from `chart.png?a=%3D` to `chart.png?a==`. This is causing dynamically generated image resource to fail.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.