IT31527: SMTP URL-OPEN CALLS MIGHT INCORRECTLY REQUIRE ESCAPING

Fix packs for DataPower Gateway version 2018.4

APAR status

• Closed as program error.

Error description

• Query parameter input to SMTP or ESMPT URL opener might
  incorrectly escape.
  For example From=sample%2Buser@example.com
  results in sample user@example.com on the server.
  

Local fix

• Double escape the value.
  Example: From=sample%252Buser@example.com would result in
  sample+user@example.com
  

Problem summary

• SMTP and ESMTP url-open calls might incorrectly escape input
  fields but double URL decoding the values.
  Example: "This%2BValue" would incorrectly translate to "This
  Value" where it should be "This+Value".
  

Problem conclusion

• Resolve the double URL decode issue.
  Note*
  Workaround of double encoding: This%252BValue
  Will now produce This%2BValue and will be to be corrected
  in order to produce expected output of This+Value.
  
  Fix is available in 2018.4.1.10
  
  For a list of the latest fix packs available, please see:
  http://www-01.ibm.com/support/docview.wss?uid=swg21237631
  

Temporary fix

• Double url encode values input to the url-open SMTP fields.
  
  Example if expected output is This+Value
  Input should be This%252BValue
  as opposed to the single encoded value:
  This%2BValue.
  

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R18X PSY

     UP