Page 1 of 1

Yahoo search + no rewriting = broken archive links

Posted: Sat Jun 09, 2007 1:32 am
by sapphirecat
When a link in the Yahoo search results points to a single entry on an s9y install with rewriting set to 'None', the slashes in the archive path are URL-encoded. That is, $_SERVER['QUERY_STRING'] contains '%2Farchive%2F42-the-entry-title-etc.html'.

However, the bundled Net_URL library doesn't convert the '%2F' sequences back into '/' characters, so s9y proceeds to display the current index (as if no query string were present) instead of the entry Yahoo so carefully linked to.

This bug was observed on 1.1.2 and is still present in 1.2-beta1.

Re: Yahoo search + no rewriting = broken archive links

Posted: Mon Jun 11, 2007 11:03 am
by garvinhicking
Hi!

Serendipity should not recode URLs to prevent XSS and other abuse. What instead should be done is that any page linking to your blog uses proper characters, not encoding '/' to '%2f'. Why does yahoo do that? They should change that behaviour. :)

It's not really a bug, because serendipity properly recognizes the proper URLs - in your case the recoding would be a new feature that is simply not implemented because of security risks.

Best regards,
Garvin

Posted: Thu Jun 14, 2007 12:58 am
by sapphirecat
Interesting. Yahoo's fixed it now.