Status/Resolution/Reason: Closed/Fixed/
Reporter/Name(from Bugbase): Aaron Neff / Aaron Neff (Aaron Neff)
Created: 11/22/2015
Components: Net Protocols
Versions: 11.0
Failure Type:
Found In Build/Fixed In Build: CF11_Final /
Priority/Frequency: Normal / Some users will encounter
Locale/System: English / Windows 10 64 bit
Vote Count: 0
cfhttp doesn't check if url attribute contains "?" before appending type="url" cfhttpparams
Steps to reproduce:
1) Run this:
index.cfm
-----------
<cfscript>
cfhttp(method="post", url="http://#CGI.HTTP_HOST##getDirectoryFromPath(CGI.SCRIPT_NAME)#/mypage.cfm?foo=bar") {//same issue when method="get"
cfhttpparam(type="url", name="bar", value="foo");
cfhttpparam(type="url", name="a", value="b");
}
if(SERVER.keyExists("cfhttpParamConcat")) {
writeDump(SERVER.cfhttpParamConcat);
}
</cfscript>
mypage.cfm
-----------
<cfset SERVER.cfhttpParamConcat = CGI.QUERY_STRING>
Actual result: foo=bar?bar=foo&a=b
Expected result: foo=bar&bar=foo&a=b
----------------------------- Additional Watson Details -----------------------------
Watson Bug ID: 4090508
External Customer Info:
External Company:
External Customer Name: Aaron Neff
External Customer Email:
External Test Config: Verified in CF11 Update 5 (build 11,0,05,293506) and build 11,0,0,296013
Attachments:
Comments: