commit c51a58ee9231e48bb25ede75307591758f911395
author Ed Tanous <edtanous@google.com> Mon Mar 27 14:43:19 2023 -0700
committer Ed Tanous <ed@tanous.net> Thu Jun 08 16:40:08 2023 +0000
tree d0c17dfd7aff3cc453fee667ff999fa0f61908ee
parent f9c794fbf2053c664902efa5d9ef638ef08acb38

Remove urlEncode

All new uses should be using boost::urls::url now.  This was the last
usage.

Tested: Logged into webui, and observed the correct URL behavior.
In browser window /foobar
Forwarded to /?next=/foobar#/login

Which is correct.

Note, this is different behavior slightly than before.  It was found
that the URI precedence goes query string THEN fragment, rather than the
other way around that we had it.  This was flagged when moving over to
boost url structures.

Signed-off-by: Ed Tanous <edtanous@google.com>
Change-Id: Ifb354537d71a43c531d7d380dd889cf646731e39

http/http_connection.hpp

diff --git a/http/http_connection.hpp b/http/http_connection.hpp
index cb0da26..11964e0 100644
--- a/http/http_connection.hpp
+++ b/http/http_connection.hpp
@@ -216,7 +216,7 @@
         }
         keepAlive = thisReq.keepAlive();
 #ifndef BMCWEB_INSECURE_DISABLE_AUTHX
-        if (!crow::authentication::isOnAllowlist(req->url().buffer(),
+        if (!crow::authentication::isOnAllowlist(req->url().path(),
                                                  req->method()) &&
             thisReq.session == nullptr)
         {