RequestPolicy/tractest — Issue #220: URLs with non-ascii characters in the path redirect improperly from redirect notification "allow"
Author: jsamuel
Created: 2011-12-22 02:47:42+00:00
State: open
Labels: extension

The following shortened url:

http://bit.ly/dS5fSO

redirects to a url with a non-ascii character in the path:

https://blog.whitehatsec.com/whitehat-security’s-approach-to-detecting-cross-site-request-forgery-csrf/

However, RP redirects to the following when a user clicks "allow" from the redirect notification:

https://blog.whitehatsec.com/whitehat-security%C3%A2%C2%80%C2%99s-approach-to-detecting-cross-site-request-forgery-csrf/

This second link is not equivalent to the first and the result is a 404.