bugGNU Wget - Bugs: bug #56244, Bug with different quotation marks

 
 

bug #56244: Bug with different quotation marks

Submitted by:  None
Submitted on:  Tue 30 Apr 2019 10:22:42 AM UTC  
 
Category:  Program Logic Severity:  3 - Normal
Priority:  5 - Normal Status:  None
Privacy:  Public Assigned to:  None
Originator Name:  Stefan Kittel Originator Email:  -email is unavailable-
Open/Closed:  Closed Release:  1.20
Operating System:  Microsoft Windows Reproducibility:  Every Time
Fixed Release:  None Planned Release:  None
Regression:  None Work Required:  None
Patch Included:  No

Add a New Comment (Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Tue 30 Apr 2019 01:15:44 PM UTC, comment #2: 

The syntax for attribute double-quoted values do not mention the unicode homoglyph, but clearly state the quotation mark ":

https://www.w3.org/TR/2012/WD-html-markup-20120329/syntax.html#attr-value-double-quoted

Tim Ruehsen <rockdaboot>
Project Administrator
Tue 30 Apr 2019 01:09:01 PM UTC, comment #1: 

Hi,

while I can believe that href=“ may result in what you describe, I can't find such in one of your website files. Did you change it already to href=" ?

Also I don't think we should be too relaxed with such unicode chars - there are several homoglyphs (unicode characters that look like a well-known ascii character) even for digits and letters. Accepting those may lead to unwanted behavior and sometimes to security issues.

Tim Ruehsen <rockdaboot>
Project Administrator
Tue 30 Apr 2019 10:22:42 AM UTC, original submission:  

Hello,

i tried to use wget for a project to download a specific website.
The problem is that some urls are wrong interpretated.

%E2%80%9C ist being put into the url and hex chars are used for the filename. So I can't access these files.

I called wget with this parameters
z:\temp\wget\wget.exe -e robots=off --output-file="Z:\temp\webshield\test1\wget.log" --save-headers --user-agent="WP-Shield Transfer" --tries=5 --timeout=30 --recursive --restrict-file-names=nocontrol --local-encoding=utf-8 --remote-encoding=utf-8 --level=0 --page-requisites --content-on-error --no-parent --no-cookies https://www.netzplan.de/

This is in the log
--2019-04-30 11:53:10--  https://www.netzplan.de/%E2%80%9C/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888%E2%80%9D
Reusing existing connection to http://www.netzplan.de:443.
HTTP request sent, awaiting response... 404 Not Found
Saving to: 'www.netzplan.de/â\200œ/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff@5510888â\200\235'

Seen in this website
https://www.netzplan.de/

A href should be href="
But here is href=“ used

So wget should handle “ and ” the same a "

Thanks

Stefan

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by rockdaboot (Posted a comment)
  • -email is unavailable- added by None (Submitted the item)
  •  

     

     

    Follows 1 latest change.

    Date Changed by Updated Field Previous Value => Replaced by
    2019-05-02 rockdaboot Open/ClosedOpen => Closed

    Back to the top


    Powered by Savane 3.5