Skip to content
#

aspnetcore

Here are 2,180 public repositories matching this topic...

bart-degreed
bart-degreed commented Jun 9, 2021

An incoming request with a query string that contains an escaped key without a value is not properly unescaped.

Example:

GET http://localhost/api/demo?fields%5BtodoItems%5D HTTP/1.1
string keys = string.Join(' ', new HttpContextAccessor().HttpContext.Request.Query.Keys);
// keys: %5BtodoItems%5D

In contrast, when the query string does contain a value, it gets

Improve this page

Add a description, image, and links to the aspnetcore topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the aspnetcore topic, visit your repo's landing page and select "manage topics."

Learn more