This is an archived snapshot of W3C's public bugzilla bug tracker, decommissioned in April 2019. Please see the home page for more details.

Bug 5249 - /W3C/LogValidator/LinkReferer.pm doesn't escape URI in RegEx
Summary: /W3C/LogValidator/LinkReferer.pm doesn't escape URI in RegEx
Status: NEW
Alias: None
Product: LogValidator
Classification: Unclassified
Component: core (show other bugs)
Version: unspecified
Hardware: PC Linux
: P2 normal
Target Milestone: ---
Assignee: Olivier Thereaux
QA Contact:
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-11-05 17:19 UTC by Martin B. Smith
Modified: 2007-11-05 17:19 UTC (History)
0 users

See Also:

Attachments

Description Martin B. Smith 2007-11-05 17:19:51 UTC 
Hi... I keep getting:

Unmatched ) in regex; marked by <-- HERE in m/my_censored_url+RegExp.$1) <-- HERE :is( : (.*)/ at /usr/lib/perl5/site_perl/5.8.7/W3C/LogValidator/LinkReferer.pm line 174.

I know this is because I have bad URLs (things with parens, especially) in my logs. They were created by a vulnerability/exploit scanner. However, in that file mentioned above, the regular expression is not escaped. I believe you can use quotemeta or \Q and \E.