{"issue":{"user":{"id":1240282,"login":"jsamuel","url":"https://api.github.com/users/jsamuel","gravatar_id":"bc1d195cedb959a3946572b08ce9e7c7","avatar_url":"https://secure.gravatar.com/avatar/bc1d195cedb959a3946572b08ce9e7c7?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png"},"milestone":null,"created_at":"2011-12-22T04:14:19Z","title":"URLs with non-ascii characters in the path redirect improperly from redirect notification \"allow\"","state":"closed","updated_at":"2011-12-22T04:14:23Z","labels":[{"name":"extension","url":"https://api.github.com/repos/RequestPolicy/requestpolicy/labels/extension","color":"ededed"}],"id":2633170,"closed_at":"2011-12-22T04:14:23Z","pull_request":{"patch_url":null,"html_url":null,"diff_url":null},"html_url":"https://github.com/RequestPolicy/requestpolicy/issues/220","body":"The following shortened url:\r\n\r\nhttp://bit.ly/dS5fSO\r\n\r\nredirects to a url with a non-ascii character in the path:\r\n\r\nhttps://blog.whitehatsec.com/whitehat-security’s-approach-to-detecting-cross-site-request-forgery-csrf/\r\n\r\nHowever, RP redirects to the following when a user clicks \"allow\" from the redirect notification:\r\n\r\nhttps://blog.whitehatsec.com/whitehat-security%C3%A2%C2%80%C2%99s-approach-to-detecting-cross-site-request-forgery-csrf/\r\n\r\nThis second link is not equivalent to the first and the result is a 404.","number":220,"url":"https://api.github.com/repos/RequestPolicy/requestpolicy/issues/220","comments":1,"assignee":null},"action":"closed"}