|
Details
|
|
The normalization of an URL consists in replacing certain sets of characters into generic one to standardize the form of an URL. For example some possible normalization consists in the following substitutions : '\' are replaced by '/', multiple '/' are replaced by a unique '/', '/./' are replaced by '/'. Backward traversal of folders can also be normalized (and url containing '/folder/../folder2/' will be normalized as '/folder2/'.
Once all normalizations are done, the requested URL can start with a combination of dots (".") and slashes ("/") leading to an attempt to reference a file or a directory which is backward from the root folder of the URL.
This alarm was introduced in STORMSHIELD firmware 6.3.5.
|
