[Oisf-devel] libhtp 0.5.x integration - bug 775

[Victor Julien]

On 06/10/2013 04:06 PM, Anoop Saldanha wrote:
> We enabled some features here to decode path in query here -
> https://github.com/inliniac/suricata/commit/d41c762689a08e6814dc93e8bfebeceab97175c3
> 
> If a query parameter is an uri, should be decode the uri?  It's an
> argument and from the user perspective we don't know how the user
> treats the query argument internally .  So some of the settings wrt
> decoding a path in a query may not make sense?

I don't think we should decode an uri if it's part of a query parameter
value.

-- 
---------------------------------------------
Victor Julien
http://www.inliniac.net/
PGP: http://www.inliniac.net/victorjulien.asc
---------------------------------------------