[Oisf-devel] libhtp - double decoding support

[Ivan Ristic]

On Mon, Jun 17, 2013 at 9:22 AM, Anoop Saldanha <anoopsaldanha at gmail.com> wrote:
> Suricata provides conf settings to enable double decoding for path
> and query.  We do this by hooking into the request line callback.
>
> Do we have any internal support from libhtp for decoding double
> encoded characters, without we explicity having to force it?

No. LibHTP is implicitly use URL-decoding where necessary. That would
quality as single decoding. You can then pick up the values and
perform another decoding pass.


> --
> -------------------------------
> Anoop Saldanha
> http://www.poona.me
> -------------------------------



-- 
Ivan Ristić