PH30854: REWRITE BACKREFERENCE ESCAPING NEEDS FLEXIBILITY

APAR status

• Closed as new function.

Error description

• Rewrite backreference escaping needs flexibility
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM HTTP Server and            *
  *                  mod_rewrite                                 *
  ****************************************************************
  * PROBLEM DESCRIPTION: The [B] flag of RewriteRule does not    *
  *                      provide fine grained control.           *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When the [B] flag is used, every regular expression
  backreference is subject to the same encoding, regardless of
  the context.
  There is no way to encode one capture/backreference without
  encoding them all.
  

Problem conclusion

• A new internal RewriteMap was added that performs the same
  encoding as the [B] flag.
  
  This map can be used more selectively as shown below
  
  ´´´
  # Only the 2nd backreference should be escaped.
  RewriteMap escape2 int:escape2
  RewriteRule ^/esc2test/([^/]+)(/{0,1}.*)$ "/other/test?one=$1
      &two=${escape2:$2}"
  ´´´
  
  The fix for this APAR is targeted for inclusion in IBM HTTP
  Server fixpacks 8.5.5.19 and 9.0.5.7.
  
  For details, see 'Recommended Updates for WebSphere Application
  Server': https://www.ibm.com/support/pages/node/715553
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM HTTP SERVER

• Fixed component ID

  5724J0801

Applicable component levels