Skip to content
This repository has been archived by the owner on Jan 31, 2020. It is now read-only.

Slashes in route params are unescaped when passing uri option #56

Open
2 tasks done
villermen opened this issue Oct 16, 2019 · 1 comment
Open
2 tasks done

Slashes in route params are unescaped when passing uri option #56

villermen opened this issue Oct 16, 2019 · 1 comment

Comments

@villermen
Copy link

villermen commented Oct 16, 2019

I expect a parameter passed to a segment route to always be escaped. When I pass an uri option when assembling a route, for whatever reason slashes in the route parameters are unescaped. This causes the route to no longer match correctly.

$router = \Zend\Router\Http\TreeRouteStack::factory([
    'routes' => [
        'example-route' => [
            'type' => \Zend\Router\Http\Segment::class,
            'options' => [
                'route' => '/example/route/with/:token',
            ],
        ],
    ],
]);

var_dump($router->assemble([
    'token' => 'token/with/slashes',
], [
    'name' => 'example-route',
]));
// string(42) "/example/route/with/token%2Fwith%2Fslashes"

var_dump($router->assemble([
    'token' => 'token/with/slashes',
], [
    'name' => 'example-route',
    'uri' => new \Zend\Uri\Uri('/'),
]));
// string(38) "/example/route/with/token/with/slashes"

I expect the token parameter in the second case to also become encoded. For some reason passing an uri without normalize_path: false normalizes the path, unescaping the passed parameters.

Undesired normalization happens by default in these places:

if (! isset($options['normalize_path']) || $options['normalize_path']) {
$uri->normalize();
}

if (! isset($options['normalize_path']) || $options['normalize_path']) {
$uri->normalize();
}

@weierophinney
Copy link
Member

This repository has been closed and moved to laminas/laminas-router; a new issue has been opened at laminas/laminas-router#1.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants