Article View: a2i.general
Article #690Re: Lynx updated to version 2.8.1dev6 on userbin
From: amatu
Date: Sun, 26 Apr 1998 00:00
Date: Sun, 26 Apr 1998 00:00
41 lines
2201 bytes
2201 bytes
[posted and e-mailed] >I updated the version of Lynx available from my directory via the >userbin to version 2.8.1dev6 today. Let me know if anyone has any >problems with it. Yes, I encountered a SERIOUS problem with it. I have verified that my problem is exhibited only by the new version of Lynx. Old versions work, as do other browsers. The problem is that this new Lynx fouls up a query string contained in a URL for a CGI invocation. For example, I have the following link in one of my web pages: <a href="http://cgi.unicorn.us.com/cgi-bin/unicorn/mgadmin?getpswd=33536&lg=1">Miami (University of)</a> Here's how the new Lynx interprets the URL above: http://cgi.unicorn.us.com/cgi-bin/unicorn/mgadmin?getpswd=xc100b~^I6=1 Note how it mangled the query string. Needless to say, my CGI goes off and does something it's not supposed to do. You can try it yourself, you won't hurt anything. Any link on the page http://unicorn.us.com/guide/programs/a_rg4.html will do this -- you're supposed to get a log-in prompt (and you do with other browsers) but the new Lynx will send the CGI off into a "change password" function. Try it with the new Lynx, then try it with an old Lynx. Version 2.6 is available at /usr/local/bin/lynx. This happens only if you have a page displaying that URL and you step on it with Lynx. If you invoke Lynx from the commandline with that URL as the argument for Lynx (in single quotes so the ampersand won't get intperpreted as a shell background directive), it works fine. The URL will get misinterpreted only if it's already displayed on a web page. I'd say this is a serious problem. There are a lot of URLs out there expressed in an explicit CGI GET format. -Alex
Technical Details
Message-ID:
<6hu605$dn2$1@samba.rahul.net>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<6heftt$897$1@samba.rahul.net>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 111b8f,eaa545624baf8db4,start X-Google-Attributes: gid111b8f,public From: amatu@unicorn.us.com Subject: Re: Lynx updated to version 2.8.1dev6 on userbin Date: 1998/04/26 Message-ID: <6hu605$dn2$1@samba.rahul.net> X-Deja-AN: 347709920 References: <6heftt$897$1@samba.rahul.net> Distribution: ca Organization: a2i network NNTP-Posting-User: unicorn Newsgroups: a2i.general