zopefoundation / Zope / 40499430204

82%

push

github

Answer a path that is not UTF-8 with BadRequest (#1305)

The server hands PATH_INFO over latin-1 decoded (PEP 3333), and publish_module
re-decodes it as UTF-8. A request for e.g. /win.ini%C0%80.jsp has bytes that
are not UTF-8, and the UnicodeDecodeError escaped publish_module as an
unhandled error. It is now raised as BadRequest inside the publishing context,
so it gets the usual 400 handling: exception views and the error log.

Fixes #1249

Co-authored-by: Dylan Jay <djay@pretaweb.com>

3534 of 6006 branches covered (58.84%)

Branch coverage included in aggregate %.

20 of 20 new or added lines in 2 files covered. (100.0%)

28182 of 32505 relevant lines covered (86.7%)

0.87 hits per line