🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: a2i.general
Article #690

Re: Lynx updated to version 2.8.1dev6 on userbin

#690
From: amatu
Date: Sun, 26 Apr 1998 00:00
41 lines
2201 bytes
[posted and e-mailed]

>I updated the version of Lynx available from my directory via the
>userbin to version 2.8.1dev6 today. Let me know if anyone has any
>problems with it.

Yes, I encountered a SERIOUS problem with it.  I have verified that my
problem is exhibited only by the new version of Lynx.  Old versions
work, as do other browsers.

The problem is that this new Lynx fouls up a query string contained in a
URL for a CGI invocation.  For example, I have the following link in one
of my web pages:

<a href="http://cgi.unicorn.us.com/cgi-bin/unicorn/mgadmin?getpswd=33536&lg=1">Miami (University of)</a>

Here's how the new Lynx interprets the URL above:

http://cgi.unicorn.us.com/cgi-bin/unicorn/mgadmin?getpswd=xc100b~^I6=1

Note how it mangled the query string.  Needless to say, my CGI
goes off and does something it's not supposed to do.  You can
try it yourself, you won't hurt anything.  Any link on the page
http://unicorn.us.com/guide/programs/a_rg4.html will do this -- you're
supposed to get a log-in prompt (and you do with other browsers) but the
new Lynx will send the CGI off into a "change password" function.

Try it with the new Lynx, then try it with an old Lynx.  Version 2.6 is
available at /usr/local/bin/lynx.

This happens only if you have a page displaying that URL and you step on
it with Lynx.  If you invoke Lynx from the commandline with that URL as
the argument for Lynx (in single quotes so the ampersand won't get
intperpreted as a shell background directive), it works fine.  The URL
will get misinterpreted only if it's already displayed on a web page.

I'd say this is a serious problem.  There are a lot of URLs out there
expressed in an explicit CGI GET format.

-Alex
Technical Details
Message-ID: <6hu605$dn2$1@samba.rahul.net>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <6heftt$897$1@samba.rahul.net>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 111b8f,eaa545624baf8db4,start
X-Google-Attributes: gid111b8f,public
From: amatu@unicorn.us.com
Subject: Re: Lynx updated to version 2.8.1dev6 on userbin
Date: 1998/04/26
Message-ID: <6hu605$dn2$1@samba.rahul.net>
X-Deja-AN: 347709920
References: <6heftt$897$1@samba.rahul.net>
Distribution: ca
Organization: a2i network
NNTP-Posting-User: unicorn
Newsgroups: a2i.general