ServletServerHttpRequest.getURI() escape the query parameters twice [SPR-13876]

[spring-projects-issues]

Sammy Chu opened SPR-13876 and commented

ServletServerHttpRequest.getURI() using URI constructor URI(String scheme, String userInfo, String host, int port, String path, String query, String fragment) to construct the URI which in the JavaDoc already stated it will escape properly... But the query parameters returned by HttpServletRequest.getQueryString() is the already encoded form, it will result the constructed URI escaped twice.

Please refer to https://github.com/spring-projects/spring-framework/blob/master/spring-web/src/main/java/org/springframework/http/server/ServletServerHttpRequest.java#L91

---

Affects: 4.1.9, 4.2.4

Reference URL: #955

[spring-projects-issues]

Sammy Chu commented

Pull request to reproduce this issue: spring-attic/spring-framework-issues#116